Improper input validation in IBM Sterling Secure Proxy

CVE-2013-0520

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References