Threats tagged 'ghsa-4c6m-gmp8-84fq'

IBM Sterling Connect Direct for Unix versions 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 contain a vulnerability where permissions for maintenance tasks are incorrectly assigned to Control Center Director (CCD) users. This misconfiguration allows privileged users to escalate their privileges further by exploiting unnecessary privilege assignments related to post update scripts.