cbcvebase.

Ibm Sterling Connect Direct For Unix vulnerabilities

4 known vulnerabilities affecting ibm/sterling_connect_direct_for_unix.

Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-4747P3CRITICALCVSS 9.8v4.2.0v4.3.0+2 more2020-12-15
CVE-2020-4747 [CRITICAL] CWE-287 CVE-2020-4747: IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtai IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516.
nvd
CVE-2025-36137P3HIGHCVSS 7.2≥ 6.2.0.7, ≤ 6.2.0.9 iFix004≥ 6.4.0.0, ≤ 6.4.0.2 iFix001+1 more2025-10-30
CVE-2025-36137 [HIGH] CWE-250 CVE-2025-36137: IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix00 IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessary privilege assignment for post
nvd
CVE-2020-4587P3HIGHCVSS 7.8v4.2.0v4.3.02020-08-24
CVE-2020-4587 [HIGH] CWE-787 CVE-2020-4587: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based b IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
nvd
CVE-2018-1903P4MEDIUMCVSS 6.7v4.2.0v4.3.0+1 more2019-04-10
CVE-2018-1903 [MEDIUM] CVE-2018-1903: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.
nvd