| Package | Affected versions | Patched versions |
|---|---|---|
| sterling connect direct web services | ≥ 6.1.0, < 6.1.0.28≥ 6.2.0, < 6.2.0.27≥ 6.3.0, < 6.3.0.13 | 6.1.0.286.2.0.276.3.0.13 |
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free