CVE-2021-29728
Severity CVSS v4.0:
Pending analysis
Type:
CWE-798
Use of Hard-coded Credentials
Publication date:
30/08/2021
Last modified:
14/02/2023
Description
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.
Impact
Base Score 3.x
4.90
Severity 3.x
MEDIUM
Base Score 2.0
4.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:sterling_external_authentication_server:2.4.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:6.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:6.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:* |
To consult the complete list of CPE names with products and versions, see this page