CVE-2022-22349medium

CVE-2022-22349: medium-severity vulnerability in IBM Sterling External Authentication Server

Published · Updated

Follow this CVE+ Monitor Sterling External Authentication Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 1.0%
IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.
CVSS:3.0/I:L/PR:L/AC:L/A:N/AV:N/C:N/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · Sterling External Authentication Server
Related CVEs — IBM Sterling External Authentication Server

In the same product, most dangerous first.

CVE-2020-4462HIGHCVE-2020-4462EPSS 3.2%CVE-2013-0517—CVE-2013-0517EPSS 0.6%CVE-2022-35720LOWIBM Sterling External Authentication Server information disclosureEPSS 0.1%