CVE-2023-32338

—

CVSS 3.1

5.5 medium

EPSS

<1%p8

Published

Sep 5, 2023 (Sep 5, 2023)

Modified

Jun 17, 2026

Description

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.

Vendors: ibm
Products: sterling external authentication server, sterling secure proxy
Weakness: CWE-522
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.