Low WID-SEC-2025-0121 1 CVE

IBM Sterling Connect:Direct: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jan 19, 2025 · Updated Jan 19, 2025 · de-DE

Vendor: IBM Product: Sterling Connect:Direct Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Sterling Connect:Direct ausnutzen, um Informationen offenzulegen.

Product

IBM Sterling Connect:Direct ist ein Managed-File-Transfer-Produkt.

Vulnerabilities 1

Medium 4.3

CVE-2024-45653

IBM Sterling Connect:Direct Web Services information disclosure

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.

IBM Sterling Connect:Direct Web Services

Jan 19, 2025

Revision history

2025-01-19 #1
Initiale Fassung

References

IBM Security Bulletin vom 2025-01-19
https://www.ibm.com/support/pages/node/7174104
GitHub Advisory Database vom 2025-01-19
https://github.com/advisories/GHSA-76q6-r7cf-qgc8