← Back

CVE-2014-4804

nvd nist
Published: Feb 14, 2015Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5 before iFix003, when SPI inclusion is enabled, allows remote attackers to obtain sensitive user data by visiting an unspecified page.

Affected (5)

Ibm
1 product
Curam Social Program Management
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Curam Social Program Management
Up to 5.2
Curam Social Program Management
Version 6.0.4.5
Curam Social Program Management
Version 6.0.5.4
Curam Social Program Management
Version 6.0.5.5
Curam Social Program Management
Version 6.0 sp2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.