CVE-2013-2989

Published: May 28, 2013Modified: Apr 29, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read permissions and write permissions by leveraging authentication to the Connect:Direct product.

Affected (3)

Products: Ibm: Sterling Connect

1 product

Sterling Connect

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Connect	Version 3.8.00
Ibm Sterling Connect	Version 4.0.00
Ibm Sterling Connect	Version 4.1.0.0

Related CWEs

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IC86449

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21637561

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84016

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IC86449

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21637561

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84016

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.