ByteOS Network

NVD Vulnerability Details :

CVE-2024-45653

Analyzed

Source-psirt@us.ibm.com

Published At-19 Jan, 2025 | 03:15

Updated At-25 Mar, 2025 | 14:27

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Primary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CPE Matches

IBM Corporation

>>sterling_connect_direct_web_services>>6.0.0

cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.0.0:*:*:*:*:*:*:*

IBM Corporation

>>sterling_connect_direct_web_services>>6.1.0

cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.1.0:*:*:*:*:*:*:*

IBM Corporation

>>sterling_connect_direct_web_services>>6.2.0

cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.2.0:*:*:*:*:*:*:*

IBM Corporation

>>sterling_connect_direct_web_services>>6.3.0

cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.3.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-201	Primary	psirt@us.ibm.com
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: CWE-201

Type: Primary

Source: psirt@us.ibm.com

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.ibm.com/support/pages/node/7174104	psirt@us.ibm.com	Vendor Advisory

Hyperlink: https://www.ibm.com/support/pages/node/7174104

Source: psirt@us.ibm.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History