CVE-2023-29260: IBM Sterling Connect:Express for UNIX server-side request forgery
IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 252135.
Other sources
IBM Sterling Connect:Express for UNIX is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability of CVE-2023-29260?
CVE-2023-29260 is a server-side request forgery (SSRF) vulnerability in IBM Sterling Connect:Express for UNIX 1.5.
How can an attacker exploit CVE-2023-29260?
An authenticated attacker can exploit CVE-2023-29260 to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Which version of IBM Sterling Connect:Express for UNIX is affected by CVE-2023-29260?
CVE-2023-29260 affects IBM Sterling Connect:Express for UNIX version 1.5.x.
What is the severity of CVE-2023-29260?
CVE-2023-29260 has a severity rating of 6.5 (Medium).
How can I mitigate the vulnerability of CVE-2023-29260?
To mitigate CVE-2023-29260, install the necessary security patches or updates provided by IBM.