NEWS T3 23 IBM Sterling Partner Engagement Manager is vulnerable to one-time password bypass
Integration News
IBM Sterling Partner Engagement Manager is vulnerable to one-time password bypass
IBM Sterling Partner Engagement Manager has addressed a reflected one-time password bypass vulnerability.
CVEID:CVE-2023-43045 Description: IBM Sterling Partner Engagement Manager could allow a remote user to perform unauthorized actions due to improper authentication. CVSS Base score: 5.9 CVSS Temporal Score:Click here. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected Products and Versions
Remediation/Fixes
Workarounds and Mitigations
None.
Haga clic en el siguiente botón para descargar este boletín en formato Pdf.