Lucene search
IbmCVELIST:CVE-2023-32338HistorySep 04, 2023 - 11:57 p.m.
CVE-2023-32338 IBM Sterling Secure Proxy information disclosure
2023-09-0423:57:44
ibm
www.cve.org
5
ibm sterling secure proxy
information disclosure
user credentials
plain text
local user
container access
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
5.1%
IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Sterling Secure Proxy",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "6.0.3, 6.1.0"
}
]
}
]Related
cve
cve
CVE-2023-32338
2023-09-05 00:15:07
prion
prion
Authentication flaw
2023-09-05 00:15:00
nvd
nvd
CVE-2023-32338
2023-09-05 00:15:07
ibm
ibm
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2023-32338