CVE-2022-34361: IBM Sterling Secure Proxy information disclosure
First published: Mon Dec 05 2022(Updated: )
IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 230522.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling Secure Proxy | <=6.0.3 | |
| IBM Sterling Secure Proxy | =6.0.3 | |
| IBM AIX | ||
| Ibm Linux On Ibm Z | ||
| Linux Linux kernel | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-34361.
What is the severity of CVE-2022-34361?
The severity of CVE-2022-34361 is high with a CVSS score of 7.5.
Which product is affected by CVE-2022-34361?
IBM Sterling Secure Proxy version 6.0.3 is affected by CVE-2022-34361.
What is the impact of CVE-2022-34361?
CVE-2022-34361 could allow an attacker to decrypt highly sensitive information.
Are there any references available for CVE-2022-34361?
Yes, you can find references for CVE-2022-34361 at the following links: 1. [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/230522) 2. [Link 2](https://www.ibm.com/support/pages/node/6844763)
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- agent/trending
- vendor/ibm
- canonical/ibm sterling secure proxy
- version/ibm sterling secure proxy/6.0.3
- canonical/ibm aix
- canonical/ibm linux on ibm z
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows