IBM Sterling Partner Engagement Manager (CVE-2022-22331) is vulnerable to insecure direct object exploitation. The issue has been addressed and users are strongly advised to apply remediation.
CVEID:CVE-2022-22331
**DESCRIPTION:**IBM Sterling Partner Engagement Manager could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR).
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/219130 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Affected Product(s) | Version(s) |
---|---|
IBM Sterling Partner Engagement Manager Standard Edition | 6.2.0 |
Product | Version | Remediation/Fix |
---|---|---|
IBM Sterling Partner Engagement Manager Standard Edition | 6.2.0 | Fixpack 6.2.0.2 |
None