CVE-2022-35720

published 2023-02-08

CVE-2022-35720: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	sterling_external_authentication_server	—	—
ibm	sterling_secure_proxy	—	—

CWE-327