IBM Sterling Partner Engagement Manager Information Disclosure Vulnerability (CNVD-2022-85417)

An information disclosure vulnerability exists in IBM Sterling Partner Engagement Manager version 2.0, an automated management tool from International Business Machines Corporation (IBM). The vulnerability stems from inadequate protection of sensitive information and encrypted storage of locally stored customer data, which can be read by other users on the system. An attacker could exploit the vulnerability to read confidential information.