IBM Sterling Secure Proxy Command Injection Vulnerability in Privileged User Context

A command injection vulnerability has been identified in IBM Sterling Secure Proxy versions 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0. This vulnerability could allow a privileged user to inject commands into the underlying operating system, arising from improper validation of certain input types.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the underlying operating system with the privileges of the user running the IBM Sterling Secure Proxy application.