CVE-2023-32338 IBM Sterling Secure Proxy information disclosure
Local users with container access can read plain text user credentials stored by IBM Sterling Secure Proxy, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32338?
CVE-2023-32338 is a medium-severity vulnerability in IBM Sterling Secure Proxy, published on 4 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.
Weakness: CWE-522
Which versions are affected by CVE-2023-32338?
It affects 2 products.
Products include Ibm Sterling External Authentication Server, Ibm Sterling Secure Proxy.
How do I fix CVE-2023-32338?
No fix has been published for CVE-2023-32338 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-32338 being exploited?
There is no known exploitation of CVE-2023-32338 in the wild and no public exploit code.
Other vulnerabilities in IBM Sterling Secure Proxy
- CVE-2020-4462 XML external entity in External Authentication Server
- CVE-2013-0517 Command injection in Sterling External Authentication Server
- CVE-2022-22336 Denial of service in Sterling Secure Proxy
- CVE-2022-22333 Memory corruption in Sterling Secure Proxy
- CVE-2021-29722 Weak cryptography in Sterling Secure Proxy
Sources
Also known as GHSA-2268-rqjm-gx38.