Sterling External Authentication Server (Ibm) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2023-09-05. Vendor: Ibm.
CVEs of Sterling External Authentication Server
- CVE-2023-29261 - CVSS 5.5 (medium), 2023-09-05: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to…
- CVE-2023-32338 - CVSS 5.5 (medium), 2023-09-05: IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a…
- CVE-2022-35720 - CVSS 5.5 (medium), 2023-02-08: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation…
- CVE-2022-22349 - CVSS 4.3 (medium), 2022-02-24: IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI…
- CVE-2022-22333 - CVSS 6.5 (medium), 2022-02-23: IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty…
- CVE-2022-22336 - CVSS 7.5 (high), 2022-02-23: IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing…
- CVE-2021-29722 - CVSS 7.5 (high), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
- CVE-2021-29728 - CVSS 4.9 (medium), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its…
- CVE-2021-29723 - CVSS 7.5 (high), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
- CVE-2020-4462 - CVSS 8.2 (high), 2020-07-16: IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an…
- CVE-2013-0517 - CVSS 7.8 (high), 2020-02-11: A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which…
