| Package | Affected versions | Patched versions |
|---|---|---|
| sterling secure proxy | = 3.4.2.0= 3.4.3.0 |
The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP method that is neither GET nor POST.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free