CVE-2022-22331
published 2022-04-01CVE-2022-22331: IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an…
high7.1CVSS 3.1
AVNACLPRLUINSUCHILAN
IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 219130.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | partner_engagement_manager | — | — |
| ibm | sterlingpartner_engagement_manager | — | — |