CNNVD-202601-3216 Information

CNNVD ID

CNNVD-202601-3216

CVE-2025-36063

  • CNNVD Published: 2026-01-20

Description (Chinese)

IBM Sterling Connect:Express Adapter for Sterling是美国国际商业机器(IBM)公司的一个通信适配器。 IBM Sterling Connect:Express Adapter for Sterling 5.2.0.00版本至5.2.0.12版本存在代码问题漏洞,该漏洞源于注销后未使会话失效,可能导致经过身份验证的用户冒充系统上的其他用户。

Description (English)

IBM Sterling Connect: Express Adapter for Sterling is a communications adapter for the United States International Business Machine (IBM). IBM Sterling Connect: Express Adapter for Sterling 5.2.0.00 to 5.2.0.12 has a code gap, which arises from the failure to invalidate sessions after write-off, which may result in other users of the authentication system.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

国际商业机器

Published

2026-01-20

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7257244

Patch

https://www.ibm.com/support/pages/node/7257244

Share on: