What is the vulnerability ID?

The vulnerability ID is CVE-2021-29749.

What is the severity of CVE-2021-29749?

The severity of CVE-2021-29749 is medium.

Which products are affected by CVE-2021-29749?

IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 are affected by CVE-2021-29749.

How can I fix CVE-2021-29749?

You can apply the patch provided by IBM to fix CVE-2021-29749.

Vulnerability/
CVE-2021-29749

medium

6.5

CWE

918

13/7/2021

15/7/2021

17/9/2024

CVE-2021-29749: SSRF

Q: What is the risk of CVE-2021-29749?

CVE-2021-29749 may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

First published: Tue Jul 13 2021(Updated: )

IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201777.

Credit: psirt@us.ibm.com psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Secure External Authentication Server	=6.0.2
IBM Secure Proxy	=6.0.2
IBM Sterling Secure Proxy	=6.0.2
IBM Secure External Authentication Server	<=6.0.2

Remedy

https://www.ibm.com/support/pages/node/6471621

Remedy

https://www.ibm.com/support/pages/node/6471623

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6471621

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2021-29749.
What is the severity of CVE-2021-29749?
The severity of CVE-2021-29749 is medium.
Which products are affected by CVE-2021-29749?
IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 are affected by CVE-2021-29749.
What is the risk of CVE-2021-29749?
CVE-2021-29749 may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
How can I fix CVE-2021-29749?
You can apply the patch provided by IBM to fix CVE-2021-29749.

collector/nvd-index
agent/type
agent/remedy
agent/first-publish-date
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/severity
agent/author
agent/last-modified-date
agent/description
agent/references
agent/event
collector/ibm-support
source/IBM
agent/weakness
agent/softwarecombine
agent/tags
collector/mitre-cve
source/MITRE
vendor/ibm
canonical/ibm secure external authentication server
version/ibm secure external authentication server/6.0.2
canonical/ibm secure proxy
version/ibm secure proxy/6.0.2
canonical/ibm sterling secure proxy
version/ibm sterling secure proxy/6.0.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.