Vulnerabilities > CVE-2022-22332 - Operation on a Resource after Expiration or Release vulnerability in IBM Partner Engagement Manager 6.2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |