CVE-2022-34362: IBM Sterling Secure Proxy HOST header injection
First published: Tue Jan 31 2023(Updated: )
IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 230523.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling Secure Proxy | =6.0.3 | |
| IBM AIX | ||
| Ibm Linux On Ibm Z | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| IBM Sterling Secure Proxy | <=6.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-34362?
CVE-2022-34362 is a vulnerability in IBM Sterling Secure Proxy 6.0.3 that allows HTTP header injection, leading to potential attacks such as cross-site scripting, cache poisoning, or session hijacking.
How does CVE-2022-34362 impact IBM Sterling Secure Proxy?
CVE-2022-34362 can impact IBM Sterling Secure Proxy 6.0.3 by enabling an attacker to manipulate the HOST headers, potentially leading to various attacks.
What is the severity of CVE-2022-34362?
CVE-2022-34362 has a severity rating of 4.6 (medium).
How can I fix CVE-2022-34362?
To fix CVE-2022-34362, update your IBM Sterling Secure Proxy software to version 6.0.3 or apply the relevant patch provided by IBM.
Where can I find more information about CVE-2022-34362?
For more information about CVE-2022-34362, you can visit the IBM X-Force Exchange website or refer to the IBM support page.
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm sterling secure proxy
- version/ibm sterling secure proxy/6.0.3
- canonical/ibm aix
- canonical/ibm linux on ibm z
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows