First published: Thu Aug 31 2023(Updated: )
IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.
Credit: psirt@us.ibm.com psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Sterling External Authentication Server | =6.0.3.0 | |
IBM Sterling External Authentication Server | =6.1.0 | |
IBM Sterling Secure Proxy | =6.0.3 | |
IBM Sterling Secure Proxy | =6.1.0 | |
IBM Sterling Secure Proxy | <=6.0.3 | |
IBM Sterling Secure Proxy | <=6.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-32338.
The severity level of CVE-2023-32338 is medium with a CVSS score of 5.1.
The affected software of CVE-2023-32338 is IBM Sterling Secure Proxy and IBM Sterling External Authentication Server version 6.0.3 and 6.1.0.
To fix CVE-2023-32338, you need to apply the patch provided by IBM for the affected software versions.
You can find more information about CVE-2023-32338 on the IBM X-Force ID page and the IBM support pages.