CVEvulnerability

CVE-2013-0520

4.0 MEDIUM Published 2013-05-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-20

Description

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.

Affected configurations

• ibm sterling secure proxy 3.2.0.0 • ibm sterling secure proxy 3.3.0.1 • ibm sterling secure proxy 3.4.0.0 • ibm sterling secure proxy 3.4.1.0 • ibm sterling secure proxy 3.4.1.2 • ibm sterling secure proxy 3.4.1.5 • ibm sterling secure proxy 3.4.1.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References