Medium · 5.1 CVE-2023-32338 EUVD-2023-36582GHSA-2268-rqjm-gx38

IBM Sterling Secure Proxy information disclosure

Published Sep 4, 2023 · Updated Sep 26, 2024 · Assigned by ibm

Vendor: IBM Product: Sterling Secure Proxy

Description

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.

Affected products

Vendor	Product	Affected	Fixed
IBM	Sterling Secure Proxy	6.0.3, 6.1.0	—

References

https://https://www.ibm.com/support/pages/node/7029765 vendor-advisory
https://www.ibm.com/support/pages/node/7029766 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/255585 vdb-entry