Описание
IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by guessing the document id. IBM X-Force ID: 107106.
Ссылки
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.1.0.0 (включая) до 6.1.1.1 (исключая)
cpe:2.3:a:ibm:curam_social_program_management:*:*:*:*:*:*:*:*
EPSS
Процентиль: 29%
0.00105
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by guessing the document id. IBM X-Force ID: 107106.
EPSS
Процентиль: 29%
0.00105
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200