PT-2024-5141 · Ibm · Ibm Sterling Partner Engagement Manager
CVE-2022-35640
·
Published
2024-07-15
·
Updated
2024-10-19
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
IBM Sterling Partner Engagement Manager version 6.2.2
Description:
The issue is related to the mechanism of forming error reports in IBM Sterling Partner Engagement Manager, which could allow a local attacker to obtain sensitive information when a detailed technical error message is returned.
Recommendations:
For IBM Sterling Partner Engagement Manager version 6.2.2, consider restricting access to detailed technical error messages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Generation of Error Message Containing Sensitive Information
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ibm Sterling Partner Engagement Manager