CVE-2024-38337

CRITICAL

IBM Sterling Secure Proxy <6.2.0.0 - Info Disclosure

Title source: llm

Description

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission assignments.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7179166

Scores

CVSS v3 9.1

EPSS 0.0011

EPSS Percentile 28.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-732

Status published

Products (3)

ibm/sterling_secure_proxy 6.1.0.0

ibm/sterling_secure_proxy 6.2.0.0

ibm/sterling_secure_proxy 6.0.0.0 - 6.0.3.1

Published Jan 19, 2025

Tracked Since Feb 18, 2026