← Database

CVE-2024-45651

MEDIUM CVSS: 6.3 Published: 2025-04-18 Modified: 2026-06-17

Description

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.

Affected Platforms

Microsoft WindowsLinux Linux KernelIbm AixIbm Sterling Connect Direct Web Services

Weakness Type

CWE-613

References