Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2020-4587

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

  • Published: Aug 24, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-4587
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
ibm / sterling_connect-direct 4.2.0 4.2.0.x
ibm / sterling_connect-direct 4.3.0 4.3.0.x
ibm / connect-direct 6.0.0 6.0.0.x
ibm / connect-direct 6.1.0 6.1.0.x