PT-2013-2400 · Ibm · Ibm Sterling Secure Proxy

Published 2013-05-10 · Updated 2017-08-29 · CVE-2013-0519

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0 before 3.4.0.6 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1 before 3.4.1.7

Description The issue allows remote attackers to obtain potentially sensitive information by reading a version string from (1) an unspecified page title and (2) an unspecified HTTP header field.

Recommendations For IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1, apply Interim Fix 1 to resolve the issue. For IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0 before 3.4.0.6 Interim Fix 1, apply Interim Fix 1 to resolve the issue. For IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1 before 3.4.1.7, apply the update to version 3.4.1.7 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-0519

Affected Products

Ibm Sterling Secure Proxy

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21636369 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0519 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82654 · Note