CVE-2018-1903

MEDIUM

IBM Sterling Connect:Direct for UNIX <6.0.0 - Privilege Escalation

Title source: llm

Description

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=ibm10875386

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/152532

Scores

CVSS v3 6.7

EPSS 0.0039

EPSS Percentile 31.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (1)

ibm/sterling_connect\ direct 4.2.0 (3 CPE variants)

Published Apr 10, 2019

Tracked Since Feb 18, 2026