IT48168: A VULNERABILITY FOUND IN COMMON-BEANUTILS USED BY INSTALL AGENT APPLIES TO IBM STERLING CONNECT:DIRECT FOR MICROSFT WINDOWS

6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if044
6.4.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if015
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if017
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if016
6.4.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004-if013
6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if041
6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if030
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if011
6.4.0.4-IBMConnectDirectforMicrosoftWindows-x64-fp0004
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008-if005
6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if017
6.4.0.3-IBMConnectDirectforMicrosoftWindows-x64-fp0003-if019
6.4.0.3-IBMConnectDirectforMicrosoftWindows-x64-fp0003-if007
6.2.0.8-IBMConnectDirectforMicrosoftWindows-x64-fp0008
6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006-if007
6.3.0.5-IBMConnectDirectforMicrosoftWindows-x64-fp0005-if035
6.4.0.2-IBMConnectDirectforMicrosoftWindows-x64-fp0002-if019
6.2.0.7-IBMConnectDirectforMicrosoftWindows-x64-fp0007
6.4.0.3-IBMConnectDirectforMicrosoftWindows-x64-fp0003
6.3.0.6-IBMConnectDirectforMicrosoftWindows-x64-fp0006

APAR status

• Closed as program error.

Error description

• A vulnerability found in common-beanutils used by Integrated
  Webservices, Install Agent and Integrated File Agent applies to
  IBM Sterling Connect:Direct for Microsoft Windows.
  Affected: CVE-2025-48734
  

Local fix

• STRMFT-17338
  AC / AS
  Circumvention: None
  

Problem summary

• Users Affected:
  Sterling Connect:Direct for Windows 6.2.0
  Sterling Connect:Direct for Windows 6.3.0
  Sterling Connect:Direct for Windows 6.4.0
  
  Problem Description:
  Vulnerabilities found in common-beanutils used by Integrated
  Webservices, Install Agent and Integrated File Agent apply to
  IBM Sterling Connect:Direct for Microsoft Windows.
  Affected: CVE-2025-48734
  
  Platforms Affected:
  Windows
  

Problem conclusion

• Resolution Summary:
  Updated Integrated Webservices to 6.4.0.3, Integrated File Agent
  to version 2.0.0.0_iFix098 and Install Agent with
  commons-beanutils to version 1.11.0, if applicable.
  
  Delivered In:
  Sterling Connect:Direct for Windows 6.2.0.6_iFix058
  Sterling Connect:Direct for Windows 6.3.0.5_iFix035
  Sterling Connect:Direct for Windows 6.4.0.2_iFix019
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR CD FOR WIND

• Fixed component ID

  5725C9908

Applicable component levels