CVE-2024-38341CWE-328

IBM Sterling Secure Proxy information disclosure

Medium · published May 28, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2025-05-28T15:21Z
EPSS history
Timeline
  • 28 MAY 15:21Z
    IBM Sterling Secure Proxy information disclosure
    cvelistv5