CVE-2021-20560

Affected software: IBM Sterling Connect:Direct Browser User Interface (UI) versions 1.4.1.1 and 1.5.0.2. Root cause / vulnerability type: Missing protection for HTML frames (no X-Frame-Options header) enabling a remote attacker to perform clickjacking by convincing a user to visit a malicious sit...

CVE-2013-0529

Summary (CVE-2013-0529) : IBM Sterling Connect:Direct Browser (part of IBM Sterling Control Center ecosystem) is affected by a cookie-security flaw where the session cookie is not marked with the Secure attribute in HTTPS sessions. Affected products/versions include IBM Sterling Connect:Direct Br...

CVE-2013-0527

IBM Sterling Connect:Direct Browser (UI) is affected by CVE-2013-0527 for versions 1.4–1.4.0.10 and 1.5–1.5.0.1, where idle-session timeout leaves pages open, potentially exposing administrative-console information to nearby attackers. The IBM bulletin directs upgrading to the current release: 1....