CVE-2024-39745

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/297312 · VDB Entry
• ibm.com/support/pages/node/7166195 · Vendor Advisory

sterling connect direct web services のその他の脆弱性

• CVE-2024-49808中 6.5IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due…
• CVE-2024-45651中 6.5IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an …
• CVE-2024-45653中 4.3IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in re…
• CVE-2024-39747緊急 9.8IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.
• CVE-2024-39746中 5.9IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the…