IBM Sterling Partner Engagement Manager Sensitive Information Disclosure Vulnerability

A vulnerability in IBM Sterling Partner Engagement Manager versions 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow remote attackers to access sensitive information. This issue arises when detailed technical error messages are returned, potentially providing information that could be exploited in further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be used to launch additional attacks against the system.

Remediation

Users are advised to upgrade to IBM Sterling Partner Engagement Manager version 6.2.3.6 or 6.2.4.3, depending on their current version. Instructions for downloading the updated versions are available on the IBM Support Fix Central website.