NetSight
IP …
medium4.9

CVE-2021-29728

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its ow…

Impact

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.

Affected products

VendorProductAffected versions
IbmSterling External Authentication Server
Versions 2.4.3.2, 6.0.1.0, 6.0.2.0
IbmSterling Secure Proxy
Versions 3.4.3.2, 6.0.1, 6.0.2

Weakness classification

CWE-798

References