Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2022-35720

IBM Sterling External Authentication Server information disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling External Authentication Server

Default version status: unaffected

  • 6.1.0affected

IBM Sterling Secure Proxy

Default version status: unaffected

  • 6.0.3affected

References