CVE-2020-4747: IBM Connect:direct

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516.

Affected products

• IBM Connect:direct: version 4.2.0 only; version 4.3.0 only; version 6.0.0 only; version 6.1.0 only

Published 2020-12-15. Last modified 2026-06-17.