CVE-2022-35639
First published: Mon Jul 18 2022(Updated: )
IBM Sterling Partner Engagement Manager do not limit the length of a connection which could cause the server to become unresponsive.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling Partner Engagement Manager Standard Edition | <=6.1 | |
| IBM Sterling Partner Engagement Manager Standard Edition | <=6.2 | |
| IBM Sterling Partner Engagement Manager on Cloud / SaaS | <=22.2 | |
| IBM Sterling Partner Engagement Manager | >=6.1<6.1.2.5 | |
| IBM Sterling Partner Engagement Manager | >=6.2<6.2.0.3 | |
| IBM Sterling Partner Engagement Manager Standard Edition | =22.2 | |
| Linux Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-35639.
What is the severity level of CVE-2022-35639?
The severity level of CVE-2022-35639 is high (7.5).
Which IBM products are affected by CVE-2022-35639?
IBM Sterling Partner Engagement Manager Standard Edition versions 6.1 and 6.2, as well as IBM Sterling Partner Engagement Manager on Cloud/SaaS version 22.2, are affected by CVE-2022-35639.
What is the impact of CVE-2022-35639?
The vulnerability could cause the server to become unresponsive.
How can I fix CVE-2022-35639?
To fix CVE-2022-35639, apply the relevant patches provided by IBM for the affected versions: IBM Sterling Partner Engagement Manager Standard Edition 6.1.2.5 and 6.2.0.3.
- collector/ibm-support
- collector/nvd-index
- vendor/ibm
- canonical/ibm sterling partner engagement manager standard edition
- version/ibm sterling partner engagement manager standard edition/6.1
- version/ibm sterling partner engagement manager standard edition/6.2
- canonical/ibm sterling partner engagement manager on cloud / saas
- version/ibm sterling partner engagement manager on cloud / saas/22.2
- canonical/ibm sterling partner engagement manager
- version/ibm sterling partner engagement manager/6.1
- version/ibm sterling partner engagement manager/6.2
- version/ibm sterling partner engagement manager standard edition/22.2
- vendor/linux
- canonical/linux linux kernel