Medium · 6.3 CVE-2022-34334 EUVD-2022-37289GHSA-w37x-68hw-2gcg

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate…

Published Oct 10, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Sterling Partner Engagement Manager

Description

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704.

Affected products

Vendor	Product	Affected	Fixed
IBM	Sterling Partner Engagement Manager	6.1, 2.0	—

References

https://www.ibm.com/support/pages/node/6828097
ibm-sterling-cve202234334-session-fixation (229704) vdb-entry