Medium · 5.4 CVE-2022-22331 EUVD-2022-27477GHSA-4m3m-pj87-8xhf

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user det…

Published Apr 1, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: SterlingPartner Engagement Manager

Description

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.

Affected products

Vendor	Product	Affected	Fixed
IBM	SterlingPartner Engagement Manager	6.2.0	—

References

https://www.ibm.com/support/pages/node/6568299
ibm-sterling-cve202222331-info-disc (219130) vdb-entry