Vulnerability · Published Aug 24, 2020 · Assigned by ibm
CVE-2020-4587
High 8.4
In plain English
A high-severity security flaw in Connect:Direct for UNIX from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.0)8.4High
Exploit odds (30 days)0.3%top 72.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Sterling Connect:Direct for UNIX | 4.2.04.3.0 |
| IBM | Connect:Direct for UNIX | 6.1.06.0.0 |
References
- https://www.ibm.com/support/pages/node/6320317 x_refsource_CONFIRM
- ibm-sterling-cve20204587-bo (184578) vdb-entry, x_refsource_XF