CVE-2018-1362

MEDIUM

IBM Curam Social Program Management <7.0.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22012528
VDB Entry, Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/137380

Scores

CVSS v3 5.0
EPSS 0.0059
EPSS Percentile 44.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

Status published
Products (4)
ibm/curam_social_program_management 6.0.5
ibm/curam_social_program_management 6.1.1.0
ibm/curam_social_program_management 6.2.0.0
ibm/curam_social_program_management 7.0.1
Published Jan 19, 2018
Tracked Since Feb 18, 2026