CVE-2021-29726

IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with the host due to improper validation of certificates. IBM X-Force ID: 201104.

Score

CVSS 3.1 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-05-17

Last modified

2024-09-16

Weaknesses

CWE-295

Affected products

• Secure External Authentication Server (Ibm)
• Sterling Secure Proxy (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/201104
• https://www.ibm.com/support/pages/node/6586754
• https://www.ibm.com/support/pages/node/6586756