IBM Sterling Partner Engagement Manager information disclosure

CVE-2022-35640

What is CVE-2022-35640?

An information disclosure vulnerability exists in IBM Sterling Partner Engagement Manager 6.2.2, which may allow a local attacker to retrieve sensitive information. When detailed technical error messages are returned, they may inadvertently disclose data that could be leveraged for unauthorized actions. Organizations using affected versions should assess their exposure and implement necessary mitigations to safeguard against potential exploitation.

References