CVE-2014-4843

Опубликовано: 08 июн. 2017

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21698548
Vendor Advisory
http://www.securityfocus.com/bid/73943
Third Party Advisory
VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21698548
Vendor Advisory
http://www.securityfocus.com/bid/73943
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00156

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-358

Связанные уязвимости

GHSA-5952-327w-4pc5