CVE-2016-5991

Опубликовано: 25 нояб. 2016

Источник: nvd

CVSS3: 4.5

CVSS2: 4.4

EPSS Низкий

Описание

IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain privileges via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1IT16911
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21989807
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94515
http://www-01.ibm.com/support/docview.wss?uid=swg1IT16911
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21989807
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94515

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:sterling_connect\:direct:4.5:*:*:*:*:windows:*:*

cpe:2.3:a:ibm:sterling_connect\:direct:4.5.01:*:*:*:*:windows:*:*

cpe:2.3:a:ibm:sterling_connect\:direct:4.6:*:*:*:*:windows:*:*

cpe:2.3:a:ibm:sterling_connect\:direct:4.7:*:*:*:*:windows:*:*

EPSS

Процентиль: 18%

0.00058

Низкий

4.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-757w-3xwr-7h7f