PT-2017-6299 · Ibm · Ibm Curam Social Program Management

Publicado 2017-08-02 · Atualizado 2017-08-14 · CVE-2014-8903

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 SP2 before EP26 IBM Curam Social Program Management versions 6.0.4 before 6.0.4.5iFix10 IBM Curam Social Program Management versions 6.0.5 before 6.0.5.6

Description The issue allows remote authenticated users to load arbitrary Java classes via unspecified vectors.

Recommendations For IBM Curam Social Program Management versions 6.0 SP2 before EP26, update to EP26 or later. For IBM Curam Social Program Management versions 6.0.4 before 6.0.4.5iFix10, update to 6.0.4.5iFix10 or later. For IBM Curam Social Program Management versions 6.0.5 before 6.0.5.6, update to 6.0.5.6 or later.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2014-8903

Produtos afetados

Ibm Curam Social Program Management

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21700098 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8903 · Nota de Segurança
• http://securityfocus.com/bid/73947 · Nota