CVE-2024-39747

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/297314 · VDB Entry
• ibm.com/support/pages/node/7166947 · Vendor Advisory

sterling connect direct web services のその他の脆弱性

• CVE-2024-49808中 6.5IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due…
• CVE-2024-45651中 6.5IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an …
• CVE-2024-45653中 4.3IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in re…
• CVE-2024-39746中 5.9IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the…
• CVE-2024-39745高 7.5IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attac…