IBM Sterling Secure Proxy up to 6.0.3.1/6.1.0.1/6.2.0.1 weak hash

Summaryinfo

A vulnerability categorized as problematic has been discovered in IBM Sterling Secure Proxy up to 6.0.3.1/6.1.0.1/6.2.0.1. This affects an unknown part. Executing a manipulation can lead to weak hash. The identification of this vulnerability is CVE-2024-38341. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in IBM Sterling Secure Proxy up to 6.0.3.1/6.1.0.1/6.2.0.1. It has been declared as problematic. This vulnerability affects an unknown functionality. The manipulation with an unknown input leads to a weak hash vulnerability. The CWE definition for the vulnerability is CWE-328. The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack). As an impact it is known to affect confidentiality. CVE summarizes:

IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

The advisory is shared for download at ibm.com. This vulnerability was named CVE-2024-38341 since 06/13/2024. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1600.001.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-16216). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Business Process Management Software

Vendor

• IBM

Name

• Sterling Secure Proxy

Version

• 6.0.3.0
• 6.0.3.1
• 6.1.0.0
• 6.1.0.1
• 6.2.0.0
• 6.2.0.1

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion