CVE-2021-29722

Published: Aug 30, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.

Affected (6)

Products: Ibm: Sterling External Authentication Server, Sterling Secure Proxy

Ibm

2 products

Sterling External Authentication Server

Sterling Secure Proxy

Configuration A

6 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Ibm Sterling External Authentication Server	Version 2.4.3.2
Ibm Sterling External Authentication Server	Version 6.0.1.0
Ibm Sterling External Authentication Server	Version 6.0.2.0
Ibm Sterling Secure Proxy	Version 3.4.3.2
Ibm Sterling Secure Proxy	Version 6.0.1
Ibm Sterling Secure Proxy	Version 6.0.2

Running on/with	Platform Versions
Hp Hp Ux	All versions
Ibm Aix	All versions
Ibm Linux On Ibm Z	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions
Oracle Solaris	All versions