CVE-2022-34354
IBM Sterling Partner Engagement Manager information disclosure
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
16 Nov 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · Partner Engagement ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →