CVE-2016-6026

Published: Oct 6, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP method that is neither GET nor POST.

Affected (9)

Products: Ibm: Sterling Secure Proxy

Ibm

1 product

Sterling Secure Proxy

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Secure Proxy	Version 3.4.2.0
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix1
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix2
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix3
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix4
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix5
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix6
Ibm Sterling Secure Proxy	Version 3.4.2.0 ifix7
Ibm Sterling Secure Proxy	Version 3.4.3.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21991278

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/93342

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21991278

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/93342

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.