IBM9A1B1496025EB9A5B2156E1F0022E6F885EA01C6E88D04E86D247C52131D9FA9Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to low integrity impacts due to Java SE (CVE-2023-22049)
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
8.6 High
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
22.1%
Summary
IBM Sterling Partner Engagement Manager uses Java SE. This bulletin identifies the steps to take to address the vulnerability.
Vulnerability Details
CVEID:CVE-2023-22049
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow a remote attacker to cause low integrity impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261048 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Sterling Partner Engagement Manager | 6.2.2 |
| IBM Sterling Partner Engagement Manager | 6.1.2 |
| IBM Sterling Partner Engagement Manager | 6.2.0 |
Remediation/Fixes
IBM strongly recommends addressing the vulnerability now by upgrading …
| Product | Version | Remediation |
|---|---|---|
| IBM Sterling Partner Engagement Manager Essentials Edition | 6.2.2.2 | Link |
| IBM Sterling Partner Engagement Manager Standard Edition | 6.2.2.2 | Link |
| IBM Sterling Partner Engagement Manager Essentials Edition | 6.1.2.9 | Link |
| IBM Sterling Partner Engagement Manager Standard Edition | 6.1.2.9 | Link |
| IBM Sterling Partner Engagement Manager Essentials Edition | 6.2.0.7 | Link |
| IBM Sterling Partner Engagement Manager Standard Edition | 6.2.0.7 | Link |
Workarounds and Mitigations
None
Related
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
8.6 High
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
22.1%