Information disclosure in IBM Sterling Secure Proxy - CVE-2023-29261
Published: September 4, 2023
Vulnerability identifier: #VU80327
CSH Severity: Low
CVSS v4: 5.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-29261
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A local attacker can gain unauthorized access to sensitive information on the system.
Affected software
IBM Sterling Secure Proxy
IBM Sterling External Authentication Server
IBM Sterling External Authentication Server
How to mitigate CVE-2023-29261
Install updates from vendor's website.
IBM Sterling External Authentication Server - addressed in versions 6.0.3.0 iFix 08, 6.1.0.0 iFix 04