Read the docs
TI-2025-24718 Aliases CVE-2025-36137GHSA-4c6m-gmp8-84fq

IBM Sterling Connect:Direct for UNIX command execution

Priority LOW 34CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-250.

Summary

IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessary privilege assignment for post update scripts.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00354 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMSterling Connect:Direct for Unix6.2.0.7 – 6.2.0.9 iFix004; 6.4.0.0 – 6.4.0.2 iFix001; 6.3.0.2 – 6.3.0.5 iFix002—No fix listedCNA
  • Sterling Connect:Direct for Unix VendorIBM Affected 6.2.0.7 – 6.2.0.9 iFix004; 6.4.0.0 – 6.4.0.2 iFix001; 6.3.0.2 – 6.3.0.5 iFix002 Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:ibm:sterling_connect\:direct:*:*:*:*:*:unix:*:*directVulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.2.0.9:*:-:*:*:unix:*:*direct 6.2.0.9VulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.2.0.9:ifix004:-:*:*:unix:*:*direct 6.2.0.9VulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.3.0.5:*:-:*:*:unix:*:*direct 6.3.0.5VulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.3.0.5:ifix002:-:*:*:unix:*:*direct 6.3.0.5VulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.4.0.2:*:-:*:*:unix:*:*direct 6.4.0.2VulnerableIBM
cpe:2.3:a:ibm:sterling_connect\:direct:6.4.0.2:ifix001:-:*:*:unix:*:*direct 6.4.0.2VulnerableIBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:*:*:*:*:*:unix:*:* Versions direct Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.2.0.9:*:-:*:*:unix:*:* Versions direct 6.2.0.9 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.2.0.9:ifix004:-:*:*:unix:*:* Versions direct 6.2.0.9 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.3.0.5:*:-:*:*:unix:*:* Versions direct 6.3.0.5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.3.0.5:ifix002:-:*:*:unix:*:* Versions direct 6.3.0.5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.4.0.2:*:-:*:*:unix:*:* Versions direct 6.4.0.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_connect\:direct:6.4.0.2:ifix001:-:*:*:unix:*:* Versions direct 6.4.0.2 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-36137
  2. 2026-10-03 Alias added: GHSA-4c6m-gmp8-84fq

References

Patch 1

  • TI-2021-16346 Missing brute-force protection in IBM Connect:Direct Web Services CVSS 3.1HIGH 7.5
  • TI-2020-04041 Out-of-bounds read in IBM Sterling Connect Direct for Microsoft Windows CVSS 3.1HIGH 7.5
  • TI-2023-13665 IBM Sterling Connect:Express for UNIX server-side request forgery CVSS 3.1MEDIUM 6.5
  • TI-2023-15624 IBM Connect:Express for UNIX denial of service CVSS 3.1HIGH 7.5
  • TI-2021-16347 IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected… CVSS 3.1HIGH 7.5
  • TI-2020-03903 Out-of-bounds write in IBM Sterling Connect:Direct for UNIX CVSS 3.1HIGH 7.8
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences