CVE-2022-22336

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/219395 · VDB Entry
• ibm.com/support/pages/node/6558796 · Vendor Advisory

sterling external authentication server のその他の脆弱性

• CVE-2023-29261中 5.5IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged informati…
• CVE-2023-32338中 5.5IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which …
• CVE-2022-35720中 5.5IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms dur…
• CVE-2022-22349中 4.3IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating R…
• CVE-2022-22333中 6.5IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, du…