Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-45653 EUVD-2024-41747GHSA-76q6-r7cf-qgc8

IBM Sterling Connect:Direct Web Services information disclosure

Published Jan 19, 2025 · Updated Jan 21, 2025 · Assigned by ibm

Description

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, 6.3 —

Advisories 1

References