CVE-2024-45653CWE-201

IBM Sterling Connect:Direct Web Services information disclosure

Medium · published January 19, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-01-19T02:39Z
EPSS history
Timeline
  • 19 JAN 02:39Z
    IBM Sterling Connect:Direct Web Services information disclosure
    cvelistv5