Skip to content
Sign in
4.3 Medium

CVE-2024-39744 IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which…

Description

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products and versions

Product Affected versions Fixed in
Sterling Connect:Direct Web Services Versions not published

Other CVEs of Sterling Connect:Direct Web Services

The 7 CVEs of Sterling Connect:Direct Web Services →
CVE-2024-45651 IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure… 6.3 Medium CVE-2024-49808 IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity… 6.3 Medium CVE-2024-45653 IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to… 4.3 Medium CVE-2024-39747 IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical… 8.1 High
Track this CVE