CVE-2024-49808 — IBM Sterling Connect:Direct Web Services improper authorization

CVE-2024-49808

IBM Sterling Connect:Direct Web Services improper authorization PUBLISHED

Description (CNA)

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.

Affected (CNA)

Vendor / product	Versions
IBM / Sterling Connect:Direct Web Services	affected 6.1.0; affected 6.2.0; affected 6.3.0

CWE

CWE-863

References

https://www.ibm.com/support/pages/node/7231180

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.