PT-2016-6751 · Ibm · Ibm Sterling Connect:Direct

Published 2016-11-25 · Updated 2016-11-28 · CVE-2016-5992

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect:Direct versions 4.5.00 through 4.5.01 IBM Sterling Connect:Direct versions 4.6.0 through 4.6.0 before 4.6.0.6 iFix008 IBM Sterling Connect:Direct versions 4.7.0 through 4.7.0 before 4.7.0.4

Description The issue allows local users to cause a denial of service via unspecified vectors.

Recommendations For versions 4.5.00 and 4.5.01, update to a version outside of the affected range. For versions 4.6.0 through 4.6.0 before 4.6.0.6 iFix008, apply 4.6.0.6 iFix008 or later. For versions 4.7.0 through 4.7.0 before 4.7.0.4, update to version 4.7.0.4 or later.

Fix

Related Identifiers

CVE-2016-5992

Affected Products

Ibm Sterling Connect:Direct

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT16911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5992 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5992 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21989807 · Vendor Advisory
• http://securityfocus.com/bid/94514 · Note