A vulnerability classified as critical was found in IBM Sterling Secure Proxy up to 3.4.2.0 iFix 7/3.4.3.0 (Business Process Management Software). Affected by this vulnerability is an unknown functionality of the component Configuration Manager. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality. The summary by CVE is:

Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary files via a crafted URL.

The weakness was published 10/06/2016 (Website). The advisory is shared at www-01.ibm.com. This vulnerability is known as CVE-2016-6023 since 06/29/2016. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1006 for this issue.

Applying the patch 3.4.2.0 iFix 8/3.4.3.0 iFix 1 is able to eliminate this problem.

Similar entries are available at 92486, 92487 and 92488.

Productinfo

Type

• Business Process Management Software

Vendor

• IBM

Name

• Sterling Secure Proxy

Version

• 3.4.0
• 3.4.1
• 3.4.2
• 3.4.2.0 iFix 7
• 3.4.3

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion