Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-29260

IBM Sterling Connect:Express for UNIX server-side request forgery

Description

IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 252135.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling Connect:Express for UNIX

Default version status: unaffected

  • 1.5affected

References