CVE-2022-34354CWE-922

IBM Sterling Partner Engagement Manager information disclosure

Medium · published November 16, 2022

CVSS v3.1
4.0
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2022-11-16T16:25Z
EPSS history
Timeline
  • 16 NOV 16:25Z
    IBM Sterling Partner Engagement Manager information disclosure
    cvelistv5