PT-2021-18435 · Ibm · Ibm Sterling Secure Proxy

CVE-2021-29728

·

Published

2021-08-30

·

Updated

2023-02-14

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 2.4.3.2, 3.4.3.2, 6.0.1, 6.0.2
Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.
Recommendations For versions 2.4.3.2, 3.4.3.2, 6.0.1, 6.0.2, consider removing or securely storing the hard-coded credentials to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-29728

Affected Products

Ibm Sterling Secure Proxy