4.3
Moyenne
CVE-2024-39744 IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which…
Description
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sterling Connect:Direct Web Services | Versions non publiées |
Autres CVE de Sterling Connect:Direct Web Services
Les 7 CVE de Sterling Connect:Direct Web Services →
CVE-2024-45651
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure…
6.3
Moyenne
CVE-2024-49808
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity…
6.3
Moyenne
CVE-2024-45653
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to…
4.3
Moyenne
CVE-2024-39747
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical…
8.1
Élevée