Lucene search
IbmCVELIST:CVE-2023-43045HistoryOct 23, 2023 - 5:37 p.m.
CVE-2023-43045 IBM Sterling Partner Engagement Manager security bypass
2023-10-2317:37:04
CWE-288
ibm
www.cve.org
2
ibm
sterling partner engagement manager
security bypass
improper authentication
remote user
unauthorized actions
x-force id: 266896
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.4%
IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Sterling Partner Engagement Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "6.1.2, 6.2.0, 6.2.2"
}
]
}
]Related
ibm
ibm
cnvd
cnvd
IBM Sterling Partner Engagement Manager Authentication Error Vulnerability
2023-10-26 00:00:00
nvd
nvd
CVE-2023-43045
2023-10-23 18:15:10
cve
cve
CVE-2023-43045
2023-10-23 18:15:10
prion
prion
Authentication flaw
2023-10-23 18:15:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.4%
Related for CVELIST:CVE-2023-43045