IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896.
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sterling_partner_engagement_manager | Ibm | 6.1.2 (including) | 6.1.2 (including) |
| Sterling_partner_engagement_manager | Ibm | 6.2.0 (including) | 6.2.0 (including) |
| Sterling_partner_engagement_manager | Ibm | 6.2.2 (including) | 6.2.2 (including) |