CVE-2013-2989 in Sterling Connect
Summary
The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
04/12/2013
Disclosure
05/28/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 64208 | IBM Sterling Connect access control | 264 | Unproven | Official fix | CVE-2013-2989 |