Sterling Connect:Express for UNIX vulnerabilities

2 known vulnerabilities in Sterling Connect:Express for UNIX from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Sterling Connect:Express for UNIX: Buffer Copy without Checking Size of Input

  CVE-2023-32331Mar 4, 2024IBM

  IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.

• 7.5 High severity

  Sterling Connect:Express for UNIX: Insertion of Sensitive Information into Log File

  CVE-2023-26023Jul 19, 2023IBM

  Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.