CVE-2023-29261

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/252139 · VDB Entry
• https//www.ibm.com/support/pages/node/7029765 · Broken Link
• ibm.com/support/pages/node/7029765 · Vendor Advisory

sterling external authentication server のその他の脆弱性

• CVE-2023-32338中 5.5IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which …
• CVE-2022-35720中 5.5IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms dur…
• CVE-2022-22349中 4.3IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating R…
• CVE-2022-22336高 7.5IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume…
• CVE-2022-22333中 6.5IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, du…