CVE-2013-2989

The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows…

published May 28, 2013

CVSS
—
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.3th percentile
Published
2013-05-28T16:00Z
EPSS history
Timeline
  • 28 MAY 16:00Z
    The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows…
    cvelistv5