CVE-2018-1903

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect:Direct for UNIX versions 4.2.0, 4.3.0, and 6.0.0

Description The issue allows a user with restricted sudo access on a system to manipulate CD UNIX and gain full sudo access.

Recommendations For versions 4.2.0, 4.3.0, and 6.0.0, restrict sudo access to prevent manipulation of CD UNIX until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.