1106 matches found
CVE-2025-33093
IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret...
CVE-2025-33093 IBM Sterling Partner Engagement Manager information disclosure
IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret...
CVE-2025-33093 IBM Sterling Partner Engagement Manager information disclosure
IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret...
CVE-2025-33093
The CVE-2025-33093 issue affects IBM Sterling Partner Engagement Manager (PEM) versions 6.1.x, 6.2.0, and 6.2.2, where the JWT secret was stored in public Helm charts instead of a Kubernetes secret. Root cause: improper key storage (CWE-260) leading to potential information disclosure. Impact sta...
Security Bulletin: IBM Sterling Partner Engagement Manager has several issues with secrets management (CVE-2025-33093)
Summary IBM Sterling Partner Engagement Manager's JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret. This issue has been addressed in the latest Helm Chart. Vulnerability Details CVEID:CVE-2025-33093 DESCRIPTION: IBM Sterling Partner Engagement Manager's JWT secr...
IBM Sterling Partner Engagement Manager 安全漏洞
IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines IBM. IBM Sterling Partner Engagement Manager suffers from an improper key storage vulnerability that stems from improper JWT key storage. An attacker could exploit the vulnerability to cau...
PT-2025-20069
Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.1.0 through 6.2.2 Description The issue concerns the storage of the JWT secret in public Helm Charts, rather than as a Kubernetes secret. This affects IBM Sterling Partner Engagement Manager...
PT-2025-23153
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer access issue has been resolved in the Linux kernel. The patch ensures that the UCSI driver waits for all pending tasks in the ucsi displayport work workqueue to finish...
The vulnerability of the Microsoft Partner Center software lies in the insufficient validation of input data, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Partner Center cloud platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
PT-2025-22228
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock scenario in the Linux kernel has been resolved. The issue occurred when the ucsi displayport remove partner function held con-mutex waiting for dp altmode work to complete,...
PT-2025-22269
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue involved the use of invalid USB device pointers after a Type-C partner disconnects. To address this, a patch was applied ...
Rapid7 Earns 5-Star Rating in the 2025 CRN® Partner Program Guide
Rapid7 has been honored by CRN®, a brand of The Channel Company, with a 5-Star Award in the 2025 CRN Partner Program Guide. This annual guide is an essential resource for solution providers seeking vendor partner programs that match their business goals and deliver high partner value. Recognition...
Security Bulletin: IBM Partner Engagement Manager is vulnerable to sensitive data exposure (CVE-2022-34354)
Summary IBM Sterling Partner Engagement Manager has addressed a client HTML5 vulnerability that allows encrypted storage of client data to be stored locally which can be read by another user on the system. Vulnerability Details CVEID:CVE-2022-34354 DESCRIPTION: IBM Sterling Partner Engagement...
Security Bulletin: IBM Partner Engagement Manager vulnerable to authentication bypass (CVE-2022-34334)
Summary IBM Sterling Partner Engagement Manager has addressed an authentication bypass vulnerability. Vulnerability Details CVEID:CVE-2022-34334 DESCRIPTION: IBM Sterling Partner Engagement Manager does not invalidate session after logout which could allow an authenticated user to impersonate...
Security Bulletin: XML External Entity Injection (XXE) attack Affects IBM Partner Engagement Manager (CVE-2022-34348)
Summary IBM Sterling Partner Engagement Manager is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Vulnerability Details CVEID:CVE-2022-34348...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to Slowloris HTTP DOS attack (CVE-2022-35639)
Summary IBM Sterling Partner Engagement Manager is vulnerable to Slowloris attack is a type of denial-of-service DoS attack which targets threaded web servers. The issue has been addressed. Vulnerability Details CVEID:CVE-2022-35639 DESCRIPTION: IBM Sterling Partner Engagement Manager do not limi...
Akamai’s Channel-First Strategy: Driving Partner Success in 2025
Customer success is Akamai’s priority — and our many industry awards highlight how we've empowered our partners to thrive. See what we have planned for 2025...
CVE-2025-29814
Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
