Description

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Related CPE's

Could not find any relations

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/297236

https://www.ibm.com/support/pages/node/7166196

Weaknesses

[email protected]

Primary
CWE-352

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.3 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Awaiting analysis

Published

2024-08-22T11:15:13.513

3 weeks ago

Last modified

2024-08-22T12:48:02.790

3 weeks ago