CVE-2014-4843

MEDIO 5.3CVE-2014-4843 · Published 08/06/2017 · updated 17/06/2026

En resumen

CVE-2014-4843 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a curam social program management (ibm).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
curam social program management ibm	`= 6.0= 6.0.4.0= 6.0.4.1= 6.0.4.2= 6.0.4.3= 6.0.4.4= 6.0.4.5= 6.0.5.0= 6.0.5.1= 6.0.5.2= 6.0.5.3= 6.0.5.4`	No fix yet

Description

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/73943 · Third Party Advisory

Más vulnerabilidades de curam social program management

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

curam social program management

ibm

= 6.0= 6.0.4.0= 6.0.4.1= 6.0.4.2= 6.0.4.3= 6.0.4.4= 6.0.4.5= 6.0.5.0= 6.0.5.1= 6.0.5.2= 6.0.5.3= 6.0.5.4

No fix yet

Más vulnerabilidades de curam social program management

Ver todo →