IBM » Sterling Secure Proxy : Security Vulnerabilities, CVEs, (Information Leak)
The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP method that is neither GET nor POST.
Max CVSS
5.3
EPSS Score
0.05%
Published
2016-10-06
Updated
2016-11-28
IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string.
Max CVSS
5.0
EPSS Score
0.16%
Published
2013-05-10
Updated
2017-08-29
2 vulnerabilities found