CVE-2020-4942

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/191942 · VDB Entry
• ibm.com/support/pages/node/6395108 · Vendor Advisory

curam social program management のその他の脆弱性

• CVE-2022-22318緊急 9.8IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impe…
• CVE-2022-22317緊急 9.8IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impe…
• CVE-2021-39068中 5.4IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
• CVE-2020-4781中 6.5An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which co…
• CVE-2020-4780中 5.3OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10…