CVE-2024-39744

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2024-08-22

Last modified

2026-03-13

Weaknesses

CWE-352

Affected products

• Sterling Connect\ (Ibm)
• Sterling Connect Direct Web Services (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/297236
• https://www.ibm.com/support/pages/node/7166196