IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with the host due to improper validation of certificates. IBM X-Force ID: 201104.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secure_external_authentication_server | Ibm | 6.0.3 (including) | 6.0.3 (including) |
| Sterling_secure_proxy | Ibm | 6.0.3 (including) | 6.0.3 (including) |