CVE-2023-29261 IBM Sterling Secure Proxy information disclosure
A local user can obtain privileged information due to inadequate memory clearing in IBM Sterling Secure Proxy.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-29261?
CVE-2023-29261 is a medium-severity vulnerability in IBM Sterling Secure Proxy, published on 5 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations. IBM X-Force ID: 252139.
Weakness: CWE-922
Which versions are affected by CVE-2023-29261?
It affects 1 product.
Products include Ibm Sterling External Authentication Server.
How do I fix CVE-2023-29261?
No fix has been published for CVE-2023-29261 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-29261 being exploited?
There is no known exploitation of CVE-2023-29261 in the wild and no public exploit code.
Other vulnerabilities in IBM Sterling Secure Proxy
- CVE-2020-4462 XML external entity in External Authentication Server
- CVE-2013-0517 Command injection in Sterling External Authentication Server
- CVE-2022-22336 Denial of service in Sterling Secure Proxy
- CVE-2022-22333 Memory corruption in Sterling Secure Proxy
- CVE-2021-29722 Weak cryptography in Sterling Secure Proxy
Sources
Also known as GHSA-hhvw-v55m-7fff.