CVE-2021-29728

Published: Aug 30, 2021Modified: Nov 21, 2024

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.

Affected (6)

Products: Ibm: Sterling External Authentication Server, Sterling Secure Proxy

Ibm

2 products

Sterling External Authentication Server

Sterling Secure Proxy

Configuration A

6 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Ibm Sterling External Authentication Server	Version 2.4.3.2
Ibm Sterling External Authentication Server	Version 6.0.1.0
Ibm Sterling External Authentication Server	Version 6.0.2.0
Ibm Sterling Secure Proxy	Version 3.4.3.2
Ibm Sterling Secure Proxy	Version 6.0.1
Ibm Sterling Secure Proxy	Version 6.0.2

Running on/with	Platform Versions
Hp Hp Ux	All versions
Ibm Aix	All versions
Ibm Linux On Ibm Z	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions
Oracle Solaris	All versions