PT-2026-25347 · Ibm · Ibm Sterling Partner Engagement Manager

Publicado 2026-03-13 · Atualizado 2026-03-13 · CVE-2025-13723

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 IBM Sterling Partner Engagement Manager versions 6.2.4.0 through 6.2.4.2

Description The software potentially allows an attacker to gain access to sensitive user information by utilizing an expired access token.

Recommendations Update IBM Sterling Partner Engagement Manager to a version later than 6.2.3.5. Update IBM Sterling Partner Engagement Manager to a version later than 6.2.4.2.

Correção

Enumeração de Fraquezas

CWE-324

Identificadores relacionados

CVE-2025-13723

Produtos afetados

Ibm Sterling Partner Engagement Manager

Referências · 3

• https://ibm.com/support/pages/node/7263391 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-13723 · Nota de Segurança
• https://twitter.com/CVEnew/status/2032605906525942049 · Publicação no Twitter