Medium · 6.7 CVE-2018-1903 EUVD-2018-12482GHSA-98fc-prpc-gmj8

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UN…

Published Apr 10, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Sterling Connect Direct for Unix

Description

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.

Affected products

Vendor	Product	Affected	Fixed
IBM	Sterling Connect:Direct for UNIX	4.2.0, 4.3.0, 6.0.0	—

References

http://www.ibm.com/support/docview.wss?uid=ibm10875386
ibm-sterling-cve20181903-priv-escalation (152532) vdb-entry