Security Advisory

CVE-2022-22349

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-24 17:10:14
Last updated 2024-09-16 22:15:14
Assigner ibm
State PUBLISHED

Description

IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.