CVE-2026-105453: IBM Sterling Connect:Direct for Unix Improper Privilege Management
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
Other sources
IBM Sterling Connect:Direct for UNIX could allow a local attacker to gain elevated privileges due to improper privilege management.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Sterling Connect:Direct for Unixto a version that resolves this vulnerability.Fixed in 6.3.0.7.iFix030 - Upgrade
Upgrade
IBM Sterling Connect:Direct for Unixto a version that resolves this vulnerability.Fixed in 6.4.0.6.iFix021
Event History
Frequently Asked Questions
Which deployments are affected?
Affected versions are IBM Sterling Connect:Direct for UNIX 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6.
What access does an attacker need?
An attacker needs local access and low-level privileges on the affected system. No user interaction is required.
What is the impact of successful exploitation?
A local attacker could gain elevated privileges. The supplied severity vector indicates high confidentiality and integrity impact, with no availability impact specified.