PT-2023-13362 · Ibm · Ibm Sterling Partner Engagement Manager

CVE-2022-34335 · Publicado 2023-01-11 · Atualizado 2023-01-18

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.1.2 through 6.2.1

Description The issue allows an authenticated user to exhaust server resources, which could lead to a denial of service.

Recommendations For versions 6.1.2 through 6.2.1, consider restricting access to authenticated users to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2022-34335

Produtos afetados

Ibm Sterling Partner Engagement Manager

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-34335 · Nota de Segurança
• https://t.me/cvenotify/41825 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/229705 · Aviso do Fabricante
• https://t.me/cvenotify/41828 · Publicação no Telegram
• https://t.me/cvenotify/42318 · Publicação no Telegram
• https://ibm.com/support/pages/node/6854331 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2022-34335 · Aviso do Fabricante