CVE-2024-45653: IBM Sterling Connect:Direct Web Services information disclosure
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.
Other sources
IBM Sterling Connect:Direct Web Services could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45653?
The severity of CVE-2024-45653 is classified as a medium risk due to potential information disclosure vulnerabilities.
How do I fix CVE-2024-45653?
To fix CVE-2024-45653, apply the relevant patches provided by IBM for Sterling Connect:Direct Web Services versions 6.0 to 6.3.
What impact does CVE-2024-45653 have on my system?
CVE-2024-45653 could allow authenticated users to access sensitive IP address information, potentially leading to further attacks.
Which versions of IBM Sterling Connect:Direct Web Services are affected by CVE-2024-45653?
CVE-2024-45653 affects IBM Sterling Connect:Direct Web Services versions 6.0, 6.1, 6.2, and 6.3.
Are there known exploits for CVE-2024-45653?
As of now, there are no publicly known exploits for CVE-2024-45653, but it poses a risk of information exposure.