CVE-2026-105453 - Vulnerability Details - OpenCVE

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	Sterling Connect Direct

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7292735

History

Tue, 20 Oct 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 20 Oct 2026 00:00:00 +0000

Type	Values Removed	Values Added
Description		IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
Title		IBM Sterling Connect:Direct for Unix Improper Privilege Management
First Time appeared		Ibm Ibm sterling Connect Direct
Weaknesses		CWE-269
CPEs		cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:::::unix::
Vendors & Products		Ibm Ibm sterling Connect Direct
References		https://www.ibm.com/support/pages/node/7292735
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-19T23:56:06.910Z

Updated: 2026-10-21T03:56:17.640Z

Reserved: 2026-10-05T13:57:37.099Z

Link: CVE-2026-105453

Vulnrichment

Updated: 2026-10-20T15:16:21.847Z

NVD

Status : Awaiting Analysis

Published: 2026-10-20T00:17:23.400

Modified: 2026-10-21T04:17:06.490

Link: CVE-2026-105453

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105453", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-10-05T13:57:37.099Z", "datePublished": "2026-10-19T23:56:06.910Z", "dateUpdated": "2026-10-21T03:56:17.640Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-19T23:56:21.017Z"}, "title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Sterling Connect Direct for Unix", "versions": [{"status": "affected", "version": "6.3.0.0", "lessThanOrEqual": "6.3.0.7", "versionType": "semver"}, {"status": "affected", "version": "6.4.0.0", "lessThanOrEqual": "6.4.0.6", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292735", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 8.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading</p><div><table><tbody><tr><td>Product</td><td>Version</td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM Sterling Connect:Direct for Unix</td><td>6.3.0.0 - 6.3.0.7.iFix029</td><td>Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0<a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX&release=6.3.0.7&platform=All&function=fixId&fixids=6.3.0.7*iFix033*&includeSupersedes=0\" rel=\"noopener noreferrer nofollow\">Fix Central</a>.</td></tr><tr><td>IBM Sterling Connect:Direct for Unix</td><td>6.4.0.0 - 6.4.0.6.iFix020</td><td>Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX&release=6.4.0.6&platform=All&function=fixId&fixids=6.4.0.6*iFix025*&includeSupersedes=0\" rel=\"noopener noreferrer nofollow\">Fix Central</a>.</td></tr></tbody></table></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-20T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-105453"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-21T03:56:17.640Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-105453", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-20T15:16:21.018579Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-20T15:16:21.847Z"}}], "cna": {"title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*", "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"], "vendor": "IBM", "product": "Sterling Connect Direct for Unix", "versions": [{"status": "affected", "version": "6.3.0.0", "versionType": "semver", "lessThanOrEqual": "6.3.0.7"}, {"status": "affected", "version": "6.4.0.0", "versionType": "semver", "lessThanOrEqual": "6.4.0.6"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading</p><div><table><tbody><tr><td>Product</td><td>Version</td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM Sterling Connect:Direct for Unix</td><td>6.3.0.0 - 6.3.0.7.iFix029</td><td>Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0<a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX&release=6.3.0.7&platform=All&function=fixId&fixids=6.3.0.7*iFix033*&includeSupersedes=0\" rel=\"noopener noreferrer nofollow\">Fix Central</a>.</td></tr><tr><td>IBM Sterling Connect:Direct for Unix</td><td>6.4.0.0 - 6.4.0.6.iFix020</td><td>Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX&release=6.4.0.6&platform=All&function=fixId&fixids=6.4.0.6*iFix025*&includeSupersedes=0\" rel=\"noopener noreferrer nofollow\">Fix Central</a>.</td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292735", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-19T23:56:21.017Z"}}}, "cveMetadata": {"cveId": "CVE-2026-105453", "state": "PUBLISHED", "dateUpdated": "2026-10-21T03:56:17.640Z", "dateReserved": "2026-10-05T13:57:37.099Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-10-19T23:56:06.910Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}