CVE-2022-22333

Katalog CVE

CVSS 6.5 · Medium EPSS 0,59%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada ibm sterling external authentication server, ibm sterling secure proxy. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133.

Rincian

Terbit di NVD

23 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/219133 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6558796 patch · advisory vendor