Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qchv-qqp6-v795

Опубликовано: 18 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.

EPSS

Процентиль: 14%
0.00047
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.3
nvd
10 месяцев назад

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.

EPSS

Процентиль: 14%
0.00047
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-863