IBM Sterling Connect:Direct for UNIX Container Hard-Coded Credentials Vulnerability

A vulnerability exists in IBM Sterling Connect:Direct for UNIX Container versions 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019, due to hard-coded credentials used for inbound authentication, outbound communication, and internal data encryption. This vulnerability could be exploited by leveraging the embedded credentials for unauthorized access or communication.

Impact

The hard-coded credentials could be exploited to bypass authentication or authorization mechanisms, potentially leading to unauthorized access or actions within the application or its components.

Remediation

Users are advised to upgrade to IBM Sterling Connect:Direct for UNIX Container version 6.3.0.6_iFix017 or 6.4.0.4, depending on their current version. Instructions for downloading the updated version are available on the IBM Support website.