CVE-2024-41783

Published: Jan 19, 2025Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.3 / Impact: 6.0

Source: psirt@us.ibm.com (Secondary)

Description

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system due to improper validation of a specified type of input.

Affected (3)

Products: Ibm: Sterling Secure Proxy

Ibm

1 product

Sterling Secure Proxy

Configuration A

3 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Ibm Sterling Secure Proxy	From 6.0.0.0 to 6.0.3.1
Ibm Sterling Secure Proxy	Version 6.1.0.0
Ibm Sterling Secure Proxy	Version 6.2.0.0

Running on/with	Platform Versions
Ibm Aix	All versions
Ibm Linux On Ibm Z	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

https://www.ibm.com/support/pages/node/7176189

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.