2 lines
4.1 KiB
JSON
2 lines
4.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Sterling Connect Direct for Microsoft Windows","vendor":"IBM","versions":[{"status":"affected","version":"4.7"},{"status":"affected","version":"4.8"},{"status":"affected","version":"6.0"},{"status":"affected","version":"6.1"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:sterling_connect\\:direct:*:*:*:*:*:windows:*:*","matchCriteriaId":"786BBE56-AD12-4461-A338-00550898F2CB","versionEndExcluding":"4.7.0.7","versionStartIncluding":"4.7.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_connect\\:direct:*:*:*:*:*:windows:*:*","matchCriteriaId":"73112C08-4C4D-45E0-9A89-ADF9CEE13288","versionEndExcluding":"4.8.0.3","versionStartIncluding":"4.8.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_connect\\:direct:*:*:*:*:*:windows:*:*","matchCriteriaId":"1296A3F9-2589-440B-9ED5-44080A2BBA4F","versionEndExcluding":"6.0.0.4","versionStartIncluding":"6.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_connect\\:direct:*:*:*:*:*:windows:*:*","matchCriteriaId":"AA26AE23-E02F-47EB-92D8-085674815F65","versionEndExcluding":"6.1.0.1","versionStartIncluding":"6.1.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906."},{"lang":"es","value":"IBM Sterling Connect Direct para Microsoft Windows versiones 4.7, 4.8, 6.0 y 6.1, podría permitir a un atacante remoto causar una denegación de servicio, causada por una lectura excesiva del búfer. Mediante el envío de una petición especialmente diseñada, el atacante podría causar que la aplicación se bloquee. IBM X-Force ID: 188906"}],"id":"CVE-2020-4767","lastModified":"2026-06-17T03:20:27.310","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-10-28T17:15:12.920","references":[{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/188906"},{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6356019"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/188906"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6356019"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}
|