PT-2016-3658 · Ibm · Ibm Curam Social Program Management

Published 2016-01-03 · Updated 2016-01-06 · CVE-2015-5023

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1

Description The issue allows remote authenticated users to execute arbitrary SQL commands.

Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-5023

Affected Products

Ibm Curam Social Program Management

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-5023 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21967851 · Vendor Advisory