VULNERABILITY INTELLIGENCE

CVE-2024-38337

CVSS score9.1 CRITICAL
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-01-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission assignments.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references