CVE-2018-1903: IBM Sterling Connect:direct

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.

Affected products

• IBM Sterling Connect:direct: version 4.2.0 only; version 4.3.0 only; version 6.0.0 only

Published 2019-04-10. Last modified 2026-06-17.