VULNERABILITY INTELLIGENCE

CVE-2024-45653

CVSS score4.3 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-01-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.

Weakness classification

  • psirt@us.ibm.com: CWE-201
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references