Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-11697
HistoryFeb 09, 2023 - 12:00 a.m.

IBM Sterling External Authentication Server Encryption Issue Vulnerability

2023-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
ibm
sterling
external authentication
encryption
vulnerability
international business machines
secure proxy
weak algorithm
sensitive information
attack

EPSS

0

Percentile

5.1%

IBM Sterling External Authentication Server is a client application from International Business Machines (IBM) that enables extended authentication and validation services for IBM products. IBM Sterling External Authentication Server version 6.1. Version 0, IBM Sterling Secure Proxy version 6.0.3 contains an encryption issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm during installation. An attacker could exploit the vulnerability to obtain sensitive information.

EPSS

0

Percentile

5.1%

Related for CNVD-2023-11697