PT-2013-2401 · Ibm · Ibm Sterling Secure Proxy

Published 2013-05-10 · Updated 2017-08-29 · CVE-2013-0520

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0.5 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1.6

Description The issue allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.

Recommendations For versions 3.2.0 through 3.3.01, apply Interim Fix 1 to version 3.3.01.23. For versions 3.4.0 through 3.4.0.5, apply Interim Fix 1 to version 3.4.0.6. For versions 3.4.1 through 3.4.1.6, apply the fix to version 3.4.1.7.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-0520

Affected Products

Ibm Sterling Secure Proxy

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0520 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21636369 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83433 · Note