Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_connect\:direct:4.2.0:*:*:*:*:unix:*:*

part: a version: 4.2.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling Connect:Direct (d1555d25-021e-5f9c-a40f-22c5de5d9e8b)
Edition*
Language*
Software edition*
Target softwareunix
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4587 vulnerable 2026-06-08 05:26:40.492357 Details available
HIGH (8.4)
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
Published: 2020-08-24T15:30:31.574Z
Updated: 2024-09-16T23:41:45.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1903 vulnerable 2026-06-08 05:11:26.373315 Details available
MEDIUM (6.7)
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.
Published: 2019-04-10T14:30:27.394Z
Updated: 2024-09-17T03:23:03.691Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.