PT-2017-9870 · Ibm · Ibm Curam Social Program Management

Publicado 2017-04-20 · Atualizado 2017-04-27 · CVE-2016-8923

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 5.2 through 7.0

Description The issue allows an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to.

Recommendations For versions 5.2 through 7.0, update to a version that includes the fix for this issue to prevent unauthorized access to sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-8923

Produtos afetados

Ibm Curam Social Program Management

Referências · 4

• http://ibm.com/support/docview.wss?uid=swg22001774 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8923 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8923 · Aviso do Fabricante
• http://securityfocus.com/bid/97989 · Nota