4

CVE-2022-34354

IBM Sterling Partner Engagement Manager information disclosure

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Partner Engagement Manager Version6.1.2 SwEditionstandard
   Linux ≫ Linux Kernel Version-
Ibm ≫ Partner Engagement Manager Version6.2.0 SwEditionstandard
   Linux ≫ Linux Kernel Version-
Ibm ≫ Partner Engagement Manager Version6.2.1 SwEditionstandard
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.088
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
psirt@us.ibm.com 4 2.5 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

https://exchange.xforce.ibmcloud.com/vulnerabilities/230424
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/6839751
Patch
Vendor Advisory