CVE-2020-4767

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect Direct for Microsoft Windows versions 4.7 through 4.8 IBM Sterling Connect Direct for Microsoft Windows versions 6.0 through 6.1

Description The issue allows a remote attacker to cause a denial of service due to a buffer over-read. By sending a specially crafted request, the attacker could cause the application to crash.

Recommendations For versions 4.7 and 4.8, update to a fixed version to resolve the issue. For versions 6.0 and 6.1, update to a fixed version to resolve the issue. As a temporary workaround, consider restricting access to the application to minimize the risk of exploitation.