CVE-2024-39747

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2024-08-31

Last modified

2024-09-01

Weaknesses

CWE-1392

Affected products

• Sterling Connect Direct Web Services (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/297314
• https://www.ibm.com/support/pages/node/7166947