IBM Sterling External Authentication Server 3.4.3.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_external_authentication_server:3.4.3.2:*:*:*:*:*:*:*
part: a version: 3.4.3.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling External Authentication Server (bedcd575-ae5a-58f2-b472-524ddae1939c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22349 |
vulnerable | 2026-06-08 05:40:53.596700 |
Details available
MEDIUM (4.3)
IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.
Published: 2022-02-24T17:10:14.818Z
Updated: 2024-09-16T22:15:14.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22336 |
vulnerable | 2026-06-08 05:40:53.570386 |
Details available
HIGH (7.5)
IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.
Published: 2022-02-23T19:45:15.270Z
Updated: 2024-09-17T04:09:01.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22333 |
vulnerable | 2026-06-08 05:40:53.563179 |
Details available
MEDIUM (6.5)
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133.
Published: 2022-02-23T19:45:13.635Z
Updated: 2024-09-16T23:15:30.064Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.