CVE-2014-4843

Published: Jun 8, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.

Affected (12)

Products: Ibm: Curam Social Program Management

Ibm

1 product

Curam Social Program Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	Version 6.0 sp2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	Version 6.0.4.0
Ibm Curam Social Program Management	Version 6.0.4.1
Ibm Curam Social Program Management	Version 6.0.4.2
Ibm Curam Social Program Management	Version 6.0.4.3
Ibm Curam Social Program Management	Version 6.0.4.4
Ibm Curam Social Program Management	Version 6.0.4.5

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	Version 6.0.5.0
Ibm Curam Social Program Management	Version 6.0.5.1
Ibm Curam Social Program Management	Version 6.0.5.2
Ibm Curam Social Program Management	Version 6.0.5.3
Ibm Curam Social Program Management	Version 6.0.5.4