CVEvulnerability

CVE-2014-4843

5.3 MEDIUM Published 2017-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-358

Description

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.

Affected configurations

• ibm curam social program management 6.0 • ibm curam social program management 6.0.4.0 • ibm curam social program management 6.0.4.1 • ibm curam social program management 6.0.4.2 • ibm curam social program management 6.0.4.3 • ibm curam social program management 6.0.4.4 • ibm curam social program management 6.0.4.5 • ibm curam social program management 6.0.5.0 • ibm curam social program management 6.0.5.1 • ibm curam social program management 6.0.5.2 • ibm curam social program management 6.0.5.3 • ibm curam social program management 6.0.5.4

Related

Weakness · CWE (1)

  • CWE-358 Improperly Implemented Security Check for Standard weakness

References