CVE-2024-38341
IBM Sterling Secure Proxy information disclosure
- State
- Published
- Severity
- 5.9 Medium
- Published
- May 28, 2025
- Updated
- Aug 16, 2025
- Reserved
- Jun 13, 2024
Description
IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | ibm |
Weaknesses
- CWE-328 Use of Weak Hash
Affected Products
| Product | Versions |
|---|---|
Sterling Secure ProxyIBM |
|
References
- https://www.ibm.com/support/pages/node/7234888vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.