Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g96j-fpm6-qgvc

Опубликовано: 02 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

EPSS

Процентиль: 47%
0.00238
Низкий

7.5 High

CVSS3

Дефекты

CWE-672

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.

EPSS

Процентиль: 47%
0.00238
Низкий

7.5 High

CVSS3

Дефекты

CWE-672