description: IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516.
problem types: Gain Access
affected:
{
product: Sterling Connect:Direct for UNIX
vendor: IBM
versions:
status: affected, version: 4.2.0
status: affected, version: 4.3.0
status: affected, version: 6.0.0
status: affected, version: 6.1.0
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 6.4
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/I:H/AC:H/S:U/PR:N/UI:N/A:N/AV:N/C:H/RL:O/E:U/RC:C
version: 3.0
]