5.4 Medium

CVE-2022-22331 IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information…

Description

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.

Affected products and versions

Product	Affected versions	Fixed in
SterlingPartner Engagement Manager	6.2.0	No fix stated

The 2 CVEs of SterlingPartner Engagement Manager →

CVE-2022-22328 IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform… 6.2 Medium

Do you use SterlingPartner Engagement Manager?

Track this CVE Watch SterlingPartner Engagement Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2022-22331

Timeline

Published April 1, 2022
Last modified September 16, 2024

References

www.ibm.com www.ibm.com
ibm-sterling-cve202222331-info-disc (219130) exchange.xforce.ibmcloud.com

Track this CVE

CVE-2022-22331 IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information…

Description

Affected products and versions

Other CVEs of SterlingPartner Engagement Manager