Skip to content
OpenAdvisories
Low · 2.3 CVE-2022-35720 EUVD-2022-38595GHSA-j98c-p6qv-fm8c

IBM Sterling External Authentication Server information disclosure

Published Feb 8, 2023 · Updated Mar 25, 2025 · Assigned by ibm

Vendor: IBM Product: Sterling External Authentication Server Product: Sterling Secure Proxy

Description

IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373.

Affected products

VendorProductAffectedFixed
IBM Sterling External Authentication Server 6.1.0 —
IBM Sterling Secure Proxy 6.0.3 —

References