CVE-2021-29728: IBM Sterling External Authentication Server

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.

Affected products

• IBM Sterling External Authentication Server: version 2.4.3.2 only; version 6.0.1.0 only; version 6.0.2.0 only
• IBM Sterling Secure Proxy: version 3.4.3.2 only; version 6.0.1 only; version 6.0.2 only

Published 2021-08-30. Last modified 2026-06-17.