Skip to content
Sign in
5.3 Medium

CVE-2020-4776 A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a…

Description

A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted file path in URL request to view arbitrary files on the system. IBM X-Force ID: 189154.

Affected products and versions

Product Affected versions Fixed in
Curam SPM 7.0 7.0.9 → 7.0.10 No fix stated

Other CVEs of Curam SPM

The 10 CVEs of Curam SPM →
CVE-2020-4942 IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an… 6.5 Medium CVE-2020-4781 An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management… 6.5 Medium CVE-2020-4780 OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program… 4.3 Medium CVE-2020-4778 IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which… 5.9 Medium
Track this CVE