CVEvulnerability
CVE-2013-2989
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product.
Affected configurations
• ibm sterling connect 3.8.00
• ibm sterling connect 4.0.00
• ibm sterling connect 4.1.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86449 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21637561 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84016 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86449 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21637561 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84016 exchange.xforce.ibmcloud.com