CVE-2020-4767
High
Description
IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Ibm Sterling Connect\
PublishedOct 28, 2020
First seenOct 28, 2020
How to fix
Update
- ibm sterling_connect\4.7.0.7, 4.8.0.3, 6.0.0.4, 6.1.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm sterling_connect\ | 4.7.0.0 ≤ v < 4.7.0.7, 4.8.0.0 ≤ v < 4.8.0.3, 6.0.0.0 ≤ v < 6.0.0.4, 6.1.0.0 ≤ v < 6.1.0.1 | 4.7.0.7, 4.8.0.3, 6.0.0.4, 6.1.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.