CVE-2018-1903

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo…

Medium · published April 10, 2019

CVSS v3.0
6.7
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/C:H/UI:N/AC:L/AV:L/I:H/A:H/S:U/PR:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00387 · 31.6th percentile
Published
2019-04-10T14:30Z
EPSS history
Timeline
  • 10 APR 14:30Z
    IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo…
    cvelistv5