CVE-2023-43045

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 23, 2023
Updated: Oct 28, 2023
CWE ID 306
CWE ID 288

Summary

CVE-2023-43045 is a recently disclosed vulnerability affecting IBM Sterling Partner Engagement Manager versions 6.1.2, 6.2.0, and 6.2.2. This issue permits unauthorized access by remote users due to insufficient authentication checks (IBM X-Force ID: 266896). Attackers can potentially exploit this weakness to perform actions beyond their authorized scope, posing a significant risk to data security and system integrity. IBM strongly recommends users of these affected versions to update their software as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM Sterling Partner Engagement Manager

Affected Vendors

  • IBM Corporation