Sterling Connect vulnerabilities
2 known vulnerabilities in Sterling Connect from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest first
- 7.2 High severity
Sterling Connect:Direct for Unix: Execution with Unnecessary Privileges
IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privilege
- 7.5 High severity
Sterling Connect:Express for UNIX: Buffer Copy without Checking Size of Input
IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.