CVE-2022-22349: Path Traversal
IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.
Other sources
IBM Sterling External Authentication Server is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22349?
The severity of CVE-2022-22349 is medium with a severity value of 4.3.
Which version of IBM Sterling External Authentication Server is affected by CVE-2022-22349?
IBM Sterling External Authentication Server versions 3.4.3.2, 6.0.2.0, and 6.0.3.0 are affected by CVE-2022-22349.
How can an attack be carried out using CVE-2022-22349?
An authorized user could import invalid data through the RESTAPI configuration, allowing for path traversals and potential attacks.
What is the Common Weakness Enumeration (CWE) for CVE-2022-22349?
The CWE for CVE-2022-22349 is CWE-22.
How can I fix CVE-2022-22349?
You can patch the affected versions of IBM Sterling External Authentication Server. Please refer to the vendor's support page for the respective version.