Description
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Sterling Connect Direct for Unix | 6.4.0.0 – ≤ 6.4.0.6, 6.3.0.0 – ≤ 6.3.0.7 | — |
Advisories 1
- WID-SEC-2026-4074 IBM Sterling Connect:Direct: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Oct 20, 2026
References
- https://www.ibm.com/support/pages/node/7292127 vendor-advisory patch