CVE-2022-34354

Medium

Description

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.

SeverityMedium

CVSS4.0

Exploit probability—

Product

Ibm Partner Engagement Manager

PublishedNov 16, 2022

First seenNov 16, 2022

Weakness typeCWE-922CWE-922

How to fix

Vendor advisories

ibm.com/support/pages/node/6839751

Affected products

Product	Affected versions	Fixed in
ibm partner_engagement_manager	6.1.2, 6.2.0, 6.2.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.