Lucene search

IbmCVE-2022-35640

HistoryJul 16, 2024 - 11:15 p.m.

CVE-2022-35640

2024-07-1623:15:10

CWE-209

ibm

web.nvd.nist.gov

ibm

sterling partner

engagement manager

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

Percentile

9.3%

JSON

IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a detailed technical error message is returned. IBM X-Force ID: 230933.

Affected configurations

Vulners

Node

ibmsterling_partner_engagement_managerMatch6.2.2

VendorProductVersionCPE
ibmsterling_partner_engagement_manager6.2.2cpe:2.3:a:ibm:sterling_partner_engagement_manager:6.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	sterling_partner_engagement_manager	6.2.2	cpe:2.3:a:ibm:sterling_partner_engagement_manager:6.2.2:::::::*

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:sterling_partner_engagement_manager:6.2.2:*:*:*:standard:*:*:*",
      "cpe:2.3:a:ibm:sterling_partner_engagement_manager:6.2.2:*:*:*:essentials:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Sterling Partner Engagement Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.2"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/230933

www.ibm.com/support/pages/node/7160300

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

Percentile

9.3%

JSON

Related for CVE-2022-35640