CVE Vulnerabilities

CVE-2022-34354

Insecure Storage of Sensitive Information

Published: Nov 16, 2022 | Modified: Nov 21, 2024
CVSS 3.x
3.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.

Weakness

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Affected Software

Name Vendor Start Version End Version
Partner_engagement_manager Ibm 6.1.2 (including) 6.1.2 (including)
Partner_engagement_manager Ibm 6.2.0 (including) 6.2.0 (including)
Partner_engagement_manager Ibm 6.2.1 (including) 6.2.1 (including)

References