Cyber Resilience

CVE-2022-22336

High

Published: 23 February 2022

Published
23 February 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0256 85.8th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-22336 is a high-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability in Ibm Sterling External Authentication Server. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 14.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.

CWE(s)
CWE-401

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

ibm
sterling external authentication server
3.4.3.2, 6.0.2.0, 6.0.3.0
ibm
sterling secure proxy
3.4.3.2, 6.0.2, 6.0.3.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References