Lucene search
IbmCVELIST:CVE-2022-34334HistoryOct 10, 2022 - 8:43 p.m.
CVE-2022-34334
2022-10-1020:43:16
ibm
www.cve.org
4
ibm
sterling partner engagement manager
session
vulnerability
authenticated user impersonation
ibm x-force id 229704
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.6%
IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704.
CNA Affected
[
{
"vendor": "IBM",
"product": "Sterling Partner Engagement Manager",
"versions": [
{
"version": "6.1",
"status": "affected"
},
{
"version": "2.0",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2022-34334
2022-10-10 21:15:11
ibm
ibm
nvd
nvd
CVE-2022-34334
2022-10-10 21:15:11
cnvd
cnvd
prion
prion
Code injection
2022-10-10 21:15:00
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.6%
Related for CVELIST:CVE-2022-34334