CVE-2024-51453 IBM Sterling Secure Proxy directory traversal

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2024-38341 IBM Sterling Secure Proxy information disclosure

IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2024-38341 IBM Sterling Secure Proxy information disclosure

IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2024-38341

CVE-2024-38341 affects IBM Sterling Secure Proxy. Affected versions are 6.0.0.0–6.0.3.1, 6.1.0.0–6.1.0.1, and 6.2.0.0–6.2.0.1. The root cause is use of weaker than expected cryptographic algorithms during hashing, which could allow an attacker to decrypt highly sensitive information (information ...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to CVE-2024-38341.

Summary IBM Sterling Secure Proxy is vulnerable due to the use of a weak crypographic algorithm during hashing. Vulnerability Details CVEID:CVE-2024-38341 DESCRIPTION: IBM Sterling Secure Proxy uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to CVE-2024-51453.

Summary IBM Sterling Secure Proxy is vulnerable to Path Traversal. Vulnerability Details CVEID:CVE-2024-51453 DESCRIPTION: IBM Sterling Secure Proxy could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot"...

Absolute Secure Access 访问控制错误漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.54 that stems from improper authorization of the management console, which...

PT-2025-23125 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.54 Description: The issue is a cross-site scripting vulnerability in the management console. Attackers with system administrator permissions can interfere with another system administrator's use of...

Securing the Software Package Supply Chain for Critical Systems

Software systems have grown as an indispensable commodity used across various industries, and almost all essential services depend on them for effective operation. The software is no longer an independent or stand-alone piece of code written by a developer but rather a collection of packages...

PT-2025-23090 · Ibm · Ibm Sterling Secure Proxy

Name of the Vulnerable Software and Affected Versions: IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.0.1 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing dot dot sequences ../ to view...

Absolute Secure Access 跨站脚本漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.54, which originates in management console cross-site scripting and could...

IBM Sterling Secure Proxy 路径遍历漏洞

IBM Sterling Secure Proxy is an International Business Machines IBM application agent for ensuring secure file transfers in an organization's unprotected zone DMZ. A path traversal vulnerability exists in IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.0.1 and earlier, which stems from...

PT-2025-23089 · Ibm · Ibm Sterling Secure Proxy

Name of the Vulnerable Software and Affected Versions: IBM Sterling Secure Proxy versions 6.0.0.0 through 6.0.3.1 IBM Sterling Secure Proxy versions 6.1.0.0 IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.0.1 Description: The issue is related to the use of weaker than expected cryptographi...

Privacy-Preserving Inconsistency Measurement

We investigate a new form of privacy-preserving inconsistency measurement for multi-party communication. Intuitively, for two knowledge bases KA, KB of two agents A, B, our results allow to quantitatively assess the degree of inconsistency for KA U KB without having to reveal the actual contents ...

PT-2025-49167

Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL Client versions 12.0 through 12.11.2 Description A locally authenticated, non-administrative Windows user can elevate their privileges to NT AUTHORITY/SYSTEM on a Windows machine where the VPN Client is installed...

IBM Sterling Secure Proxy 安全漏洞

IBM Sterling Secure Proxy is an application agent from International Business Machines IBM used to ensure the secure transfer of files in an organization's unprotected zone DMZ. A security vulnerability exists in IBM Sterling Secure Proxy that stems from the use of a weak encryption algorithm tha...

PT-2025-23124 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.54 Description: The issue is a privilege escalation vulnerability in the management console. Attackers with administrative access to a specific subset of privileged features in the console can eleva...

PT-2025-23123 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.54 Description: The issue allows attackers with administrative access to the management console and specific permissions to bypass those permissions, improperly modifying settings. The attack...

Absolute Secure Access 安全漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.54, which stems from an elevation of privilege in the management console,...

CVE-2025-5198 Stackrox: xss in stackrox

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting XSS if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object that is applied to a secured cluster. This obje...