VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Apr 18, 2025· Updated Jun 17, 2026

CVE-2024-49808

CVE-2024-49808

Description

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Sterling Connect:Direct Web Servicescpe-rescue2 versions
    cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.1.0.0:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.1.0.0:*:*:*:*:windows:*:*range: 6.1.0
    • (no CPE)range: 6.1.0, 6.2.0, and 6.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.