Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-39744

IBM Sterling Connect:Direct Web Services cross-site request forgery

Description

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling Connect:Direct Web Services

Default version status: unaffected

  • 6.0, 6.1, 6.2, 6.3affected

References