Vulnerabilities in IBM Sterling External Authentication Server