{"id":"CVE-2013-0520","aliases":["EUVD-2013-0531","GHSA-29rm-vp9j-87qp"],"status":"published","title":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6...","description":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01329,"percentile":0.71225,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2013-05-10T10:00:00Z","modified":"2026-06-16T23:49:37Z","products":[{"vendor":"ibm","product":"sterling_secure_proxy"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21636369","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/83433","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0520"},{"url":"https://github.com/advisories/GHSA-29rm-vp9j-87qp"}],"sources":{"cve":[{"id":"CVE-2013-0520","description":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.","status":"published","published":"2013-05-10T10:00:00Z","modified":"2024-08-06T14:33:05.232Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-0531","description":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.","status":"published","published":"2013-05-10T10:00:00Z","modified":"2024-08-06T14:33:05Z","updated_at":"2026-11-03T01:56:44.745992Z"}],"ghsa":[{"id":"GHSA-29rm-vp9j-87qp","title":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6...","description":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.","status":"published","published":"2022-05-05T02:49:13Z","modified":"2023-02-01T05:02:02Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:49.585103Z"}],"nvd":[{"id":"CVE-2013-0520","description":"IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.","status":"published","published":"2013-05-10T11:42:29.94Z","modified":"2026-06-16T23:49:37.36Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:25.704053Z"}]}}