CVE-2020-4587: IBM Connect:direct

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

Affected products

• IBM Connect:direct: version 6.0.0 only; version 6.1.0 only
• IBM Sterling Connect:direct: version 4.2.0 only; version 4.3.0 only

Published 2020-08-24. Last modified 2026-06-17.