CVE-2022-34361mediumCWE-327

CVE-2022-34361: medium-severity vulnerability in IBM Sterling Secure Proxy

IBM Sterling Secure Proxy information disclosure

Published · Updated

Follow this CVE+ Monitor Sterling Secure Proxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.4%
IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 230522.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Sterling Secure Proxy
Related CVEs — IBM Sterling Secure Proxy

In the same product, most dangerous first.

CVE-2020-4462HIGHCVE-2020-4462EPSS 3.2%CVE-2022-22336HIGHCVE-2022-22336EPSS 2.0%CVE-2021-29728MEDIUMCVE-2021-29728EPSS 1.0%CVE-2021-29723MEDIUMCVE-2021-29723EPSS 0.9%CVE-2021-29722MEDIUMCVE-2021-29722EPSS 0.9%CVE-2021-29726MEDIUMCVE-2021-29726EPSS 0.9%