CVE-2013-0519

Published: May 10, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string.

Affected (7)

Products: Ibm: Sterling Secure Proxy

Ibm

1 product

Sterling Secure Proxy

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Secure Proxy	Version 3.2.0.0
Ibm Sterling Secure Proxy	Version 3.3.0.1
Ibm Sterling Secure Proxy	Version 3.4.0.0
Ibm Sterling Secure Proxy	Version 3.4.1.0
Ibm Sterling Secure Proxy	Version 3.4.1.2
Ibm Sterling Secure Proxy	Version 3.4.1.5
Ibm Sterling Secure Proxy	Version 3.4.1.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21636369

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82654

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21636369

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82654

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.