CVE-2021-29728
30.08.2021, 17:15
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | sterling_external_authentication_server | 2.4.3.2 |
| ibm | sterling_external_authentication_server | 6.0.1.0 |
| ibm | sterling_external_authentication_server | 6.0.2.0 |
| ibm | sterling_secure_proxy | 3.4.3.2 |
| ibm | sterling_secure_proxy | 6.0.1 |
| ibm | sterling_secure_proxy | 6.0.2 |
𝑥
= Vulnerable software versions
References