CVEvulnerability
CVE-2013-4035
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-05-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.3 HIGH — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.1 MEDIUM — AV:A/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-310
Description
IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the client. IBM X-Force ID: 86138.
Affected configurations
• ibm sterling connect 3.4.0.0
• ibm sterling connect 3.4.0.1
• ibm sterling connect 3.5.0.0
• ibm sterling connect 3.6.0
• ibm sterling connect 3.6.0.1
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86138 VDB Entry, Vendor Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for-openvms-unencrypted-data-transfers-can-occur-even-when-ssl-encryption-is-specified-in-the-security-configuration-cve-2013-4035/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86138 VDB Entry, Vendor Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for-openvms-unencrypted-data-transfers-can-occur-even-when-ssl-encryption-is-specified-in-the-security-configuration-cve-2013-4035/ Vendor Advisory