Rewterz Threat Advisory – Multiple IBM Sterling Order Management Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2022-34333 CVSS:5.9

IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

CVE-2022-33959 CVSS:5.4

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users.

Impact

• Information Disclosure
• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2022-34333
• CVE-2022-33959

Affected Vendors

IBM

Affected Products

• IBM Sterling Order Management 10.0

Remediation

Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.

IBM Security Bulletin