5.9
CVSSv3

CVE-2016-6025

Published: 06/10/2016 Updated: 28/11/2016
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.9 | Impact Score: 3.4 | Exploitability Score: 2.5
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 prior to 3.4.2.0 iFix 8 and 3.4.3 prior to 3.4.3.0 iFix 1 allows remote malicious users to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm sterling secure proxy 3.4.2.0

ibm sterling secure proxy 3.4.3.0