CVE-2014-4843

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
ibmcuram_social_program_management
6.0:sp2
ibmcuram_social_program_management
6.0.4.0
ibmcuram_social_program_management
6.0.4.1
ibmcuram_social_program_management
6.0.4.2
ibmcuram_social_program_management
6.0.4.3
ibmcuram_social_program_management
6.0.4.4
ibmcuram_social_program_management
6.0.4.5
ibmcuram_social_program_management
6.0.5.0
ibmcuram_social_program_management
6.0.5.1
ibmcuram_social_program_management
6.0.5.2
ibmcuram_social_program_management
6.0.5.3
ibmcuram_social_program_management
6.0.5.4
𝑥
= Vulnerable software versions