Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to privilege escalation attack (CVE-2022-22328)

Summary IBM Sterling Partner Engagement Manager CVE-2022-22328 is vulnerable to privilege escalation attack. The issue has been addressed. Vulnerability Details CVEID: CVE-2022-22328 DESCRIPTION: IBM Sterling Partner Engagement Manager could allow a malicious user to elevate their privileges and...

CVE-2022-22332

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131...

Security Bulletin: Apache Log4j vulnerability impacts IBM Sterling Partner Engagement Manager (CVE-2021-45105, CVE-2021-45046)

Summary Apache Log4j is used by IBM Sterling Partner Engagement Manager for generating logs in all components and tools. This bulletin provides remediation for the reported vulnerability by upgrading Apache Log4j jars to 2.17.0 in IBM Sterling Partner Engagement Manager. Vulnerability Details...

Security Bulletin: Apache Log4j vulnerability (CVE-2021-45046) affects IBM Sterling Partner Engagement Manager

Summary Apache Log4j is used by IBM Sterling Partner Engagement Manager for generating logs in all components and tools. This bulletin provides remediation for the reported vulnerability by upgrading Log4j jars to 2.16.0 in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:...

Security Bulletin: Security Vulnerability in Apache Log4j Affects IBM Sterling Partner Engagement Manager (CVE-2021-44228)

Summary Log4j is used by IBM Sterling Partner Engagement Manager for generating logs in all components and tools. This bulletin provides a remediation for the reported CVE-2021-44228 by upgrading log4j jars to 2.15.0 where fix to Log4j CVE-2021-44228 vulnerability is addressed. Vulnerability...

CVE-2021-29781

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...

CVE-2021-29781

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...

CVE-2021-29781

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...

CVE-2021-29781

CVE-2021-29781 affects IBM Sterling Partner Engagement Manager 2.0. The root cause is an unsafe deserialization flaw that could allow a remote attacker to execute arbitrary code by sending specially crafted data. The IBM Security Bulletin confirms a remote-code-execution impact with high/critical...

IBM Sterling Partner Engagement Manager 代码问题漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from IBM USA. A code issue vulnerability exists in IBM Sterling Partner Engagement Manager. A remote attacker could exploit the vulnerability to execute arbitrary code on the system by sending specially designed data...

CVE-2021-29781

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...