CVE-2020-4462

Published: Jul 16, 2020Modified: Nov 21, 2024

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482.

Affected (8)

Products: Ibm: Sterling External Authentication Server, Sterling Secure Proxy

Ibm

2 products

Sterling External Authentication Server

Sterling Secure Proxy

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling External Authentication Server	Version 2.4.2.0
Ibm Sterling External Authentication Server	Version 2.4.3.2
Ibm Sterling External Authentication Server	Version 6.0.0.0
Ibm Sterling External Authentication Server	Version 6.0.1.0
Ibm Sterling Secure Proxy	Version 3.4.2.0
Ibm Sterling Secure Proxy	Version 3.4.3.0
Ibm Sterling Secure Proxy	Version 6.0.0.0
Ibm Sterling Secure Proxy	Version 6.0.1.0