CVE-2022-22336

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/219395
• https://www.ibm.com/support/pages/node/6558796 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6558796

Frequently Asked Questions

• What is CVE-2022-22336?

  CVE-2022-22336 is a vulnerability in IBM Sterling External Authentication Server and IBM Sterling Secure Proxy that could allow a remote user to consume resources causing a denial of service due to a resource leak.

• What is the severity of CVE-2022-22336?

  The severity of CVE-2022-22336 is high, with a severity value of 7.5.

• Which software versions are affected by CVE-2022-22336?

  IBM Sterling External Authentication Server versions 3.4.3.2, 6.0.2.0, and 6.0.3.0, as well as IBM Sterling Secure Proxy versions 3.4.3.2, 6.0.2, and 6.0.3.0 are affected by CVE-2022-22336.

• How can I fix CVE-2022-22336?

  To fix CVE-2022-22336, upgrade to the latest version of IBM Sterling External Authentication Server or IBM Sterling Secure Proxy. Visit the IBM Support page for each product version to download the necessary patches.

• Where can I find more information about CVE-2022-22336?

  You can find more information about CVE-2022-22336 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/219395) and the IBM Support page (https://www.ibm.com/support/pages/node/6558796).