7.2
Élevée
CVE-2025-36137 IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2…
Description
IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessary privilege assignment for post update scripts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sterling Connect:Direct for UNIX 6.4 | 6.4.0.0 → dernières | Pas de correctif indiqué |
| Sterling Connect:Direct for UNIX 6.3 | 6.3.0.2 → dernières | Pas de correctif indiqué |
| Sterling Connect:Direct for UNIX 6.2 | 6.2.0.7 → dernières | Pas de correctif indiqué |
Autres CVE de Sterling Connect:Direct for UNIX
Les 4 CVE de Sterling Connect:Direct for UNIX →
CVE-2020-4747
IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated…
7.4
Élevée
CVE-2020-4587
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow,…
8.4
Élevée
CVE-2018-1903
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a…
6.7
Moyenne