Medium · 5.6 CVE-2022-22332 EUVD-2022-27478GHSA-g96j-fpm6-qgvc

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for t…

Published Apr 1, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Sterling Partner Engagement Manager

Description

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

Affected products

Vendor	Product	Affected	Fixed
IBM	Sterling Partner Engagement Manager	6.2.0	—

References

https://www.ibm.com/support/pages/node/6568301
ibm-sterling-cve202222332-session-fixation (219131) vdb-entry