CVE-2022-34354
IBM Sterling Partner Engagement Manager information disclosure
- State
- Published
- Severity
- 4.0 Medium
- Published
- Nov 16, 2022
- Updated
- Apr 25, 2025
- Reserved
- Jun 23, 2022
Description
IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.0 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | ibm |
Weaknesses
- CWE-922 Insecure Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Partner Engagement ManagerIBM |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.