medium6.3
CVE-2024-45651
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to…
Impact
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Sterling Connect Direct Web Services | from 6.1.0 before 6.1.0.28 from 6.2.0 before 6.2.0.27 from 6.3.0 before 6.3.0.13 |