CVE-2022-34362: IBM Sterling Secure Proxy HOST header injection
IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 230523.
Other sources
IBM Sterling Secure Proxy is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-34362?
CVE-2022-34362 is a vulnerability in IBM Sterling Secure Proxy 6.0.3 that allows HTTP header injection, leading to potential attacks such as cross-site scripting, cache poisoning, or session hijacking.
How does CVE-2022-34362 impact IBM Sterling Secure Proxy?
CVE-2022-34362 can impact IBM Sterling Secure Proxy 6.0.3 by enabling an attacker to manipulate the HOST headers, potentially leading to various attacks.
What is the severity of CVE-2022-34362?
CVE-2022-34362 has a severity rating of 4.6 (medium).
How can I fix CVE-2022-34362?
To fix CVE-2022-34362, update your IBM Sterling Secure Proxy software to version 6.0.3 or apply the relevant patch provided by IBM.
Where can I find more information about CVE-2022-34362?
For more information about CVE-2022-34362, you can visit the IBM X-Force Exchange website or refer to the IBM support page.