7.2
High
CVE-2025-36137 IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2…
Description
IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessary privilege assignment for post update scripts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling Connect:Direct for UNIX 6.4 | 6.4.0.0 → latest | No fix stated |
| Sterling Connect:Direct for UNIX 6.3 | 6.3.0.2 → latest | No fix stated |
| Sterling Connect:Direct for UNIX 6.2 | 6.2.0.7 → latest | No fix stated |
Other CVEs of Sterling Connect:Direct for UNIX
The 4 CVEs of Sterling Connect:Direct for UNIX →
CVE-2020-4747
IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated…
7.4
High
CVE-2020-4587
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow,…
8.4
High
CVE-2018-1903
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a…
6.7
Medium