6.3
Moyenne
CVE-2024-45651 IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure…
Description
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sterling Connect:Direct Web Services | 6.3.0 | Pas de correctif indiqué |
| Sterling Connect:Direct Web Services | 6.2.0 | Pas de correctif indiqué |
| Sterling Connect:Direct Web Services | 6.1.0 | Pas de correctif indiqué |
Autres CVE de Sterling Connect:Direct Web Services
Les 7 CVE de Sterling Connect:Direct Web Services →
CVE-2024-49808
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity…
6.3
Moyenne
CVE-2024-45653
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to…
4.3
Moyenne
CVE-2024-39747
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical…
8.1
Élevée
CVE-2024-39745
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms…
5.9
Moyenne