CVE-2023-29261mediumCWE-922

CVE-2023-29261: medium-severity vulnerability in IBM Sterling Secure Proxy

IBM Sterling Secure Proxy information disclosure

Published · Updated

Follow this CVE+ Monitor Sterling Secure Proxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.2%
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations. IBM X-Force ID: 252139.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Sterling Secure Proxy
Related CVEs — IBM Sterling Secure Proxy

In the same product, most dangerous first.

CVE-2020-4462HIGHCVE-2020-4462EPSS 3.2%CVE-2022-22336HIGHCVE-2022-22336EPSS 2.0%CVE-2021-29728MEDIUMCVE-2021-29728EPSS 1.0%CVE-2021-29723MEDIUMCVE-2021-29723EPSS 0.9%CVE-2021-29722MEDIUMCVE-2021-29722EPSS 0.9%CVE-2021-29726MEDIUMCVE-2021-29726EPSS 0.9%