CVE-2016-8923
MEDIUMIBM Curam Social Program Management <7.0 - Info Disclosure
Title source: llmDescription
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536.
Scores
CVSS v3
4.3
EPSS
0.0020
EPSS Percentile
42.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (40)
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
ibm/curam_social_program_management
... and 25 more
Timeline
Published
Apr 20, 2017
Tracked Since
Feb 18, 2026