CVE-2013-0527

Published: Jun 21, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain sensitive administrative-console information by reading the screen of an unattended workstation.

Affected (8)

Products: Ibm: Sterling Connect Direct User Interface

Ibm

1 product

Sterling Connect Direct User Interface

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Connect Direct User Interface	Version 1.4.0.0
Ibm Sterling Connect Direct User Interface	Version 1.4.0.10
Ibm Sterling Connect Direct User Interface	Version 1.4.0.2
Ibm Sterling Connect Direct User Interface	Version 1.4.0.3
Ibm Sterling Connect Direct User Interface	Version 1.4.0.6
Ibm Sterling Connect Direct User Interface	Version 1.4.0.7