What’s Vulnerable › Vulnerabilities

CVE-2018-1903

• Severity: medium (CVSS 6.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-10 · updated 2026-06-17

Description

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.

Affected products

• IBM Sterling Connect:Direct for UNIX: 4.2.0, 4.3.0, 6.0.0

References

• http://www.ibm.com/support/docview.wss?uid=ibm10875386
• https://exchange.xforce.ibmcloud.com/vulnerabilities/152532
• http://www.ibm.com/support/docview.wss?uid=ibm10875386
• https://exchange.xforce.ibmcloud.com/vulnerabilities/152532

Get alerted when CVE-2018-1903 or the next vulnerability affects your stack