IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.
2023-09-05T00:15:07.750
2024-11-21T08:03:08.703
Modified
CVSSv3.1: 5.1 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ibm | sterling_external_authentication_server | 6.0.3.0 | Yes |
Application | ibm | sterling_external_authentication_server | 6.1.0 | Yes |
Application | ibm | sterling_secure_proxy | 6.0.3 | Yes |
Application | ibm | sterling_secure_proxy | 6.1.0 | Yes |