IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Partner_engagement_manager | Ibm | 6.1.2 (including) | 6.1.2 (including) |
| Partner_engagement_manager | Ibm | 6.2.0 (including) | 6.2.0 (including) |
| Partner_engagement_manager | Ibm | 6.2.1 (including) | 6.2.1 (including) |