CVE-2023-46181: IBM Secure Proxy information disclosure
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686.
Other sources
IBM Sterling Secure Proxy allows web pages to be stored locally which can be read by another user on the system.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46181?
CVE-2023-46181 is classified as a medium severity vulnerability due to the potential for unauthorized access to locally stored web pages.
How do I fix CVE-2023-46181?
To mitigate CVE-2023-46181, upgrade IBM Sterling Secure Proxy to version 6.0.4 or higher for 6.0.x and to version 6.1.1 or higher for 6.1.x.
Which versions of IBM Sterling Secure Proxy are affected by CVE-2023-46181?
CVE-2023-46181 affects IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0.
What does CVE-2023-46181 allow an attacker to do?
CVE-2023-46181 allows an attacker to read locally stored web pages that should be restricted to the original user.
Is there a patch available for CVE-2023-46181?
Yes, patches are available for CVE-2023-46181 for affected versions of IBM Sterling Secure Proxy.