CVE-2023-32338

Medium

Description

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.

SeverityMedium
CVSS5.1
Exploit probability—
ProductIbm Sterling External Authentication Server
PublishedSep 5, 2023
First seenSep 5, 2023

How to fix

Affected products

ProductAffected versionsFixed in
ibm sterling_external_authentication_server6.0.3.0, 6.1.0—
ibm sterling_secure_proxy6.0.3, 6.1.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-32338 · Ibm Sterling External Authentication Server · Dark Radar