← Back

CVE-2023-32338

nvd nist
Published: Sep 5, 2023Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.

Affected (4)

Ibm
2 products
Sterling External Authentication Server
Sterling Secure Proxy
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Sterling External Authentication Server
Version 6.0.3.0
Sterling External Authentication Server
Version 6.1.0
Ibm
Sterling Secure Proxy
Version 6.0.3
Sterling Secure Proxy
Version 6.1.0

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (7)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Broken Link
Source: psirt@us.ibm.com
Vendor Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.