IBM Cúram Social Program Management CVE-2017-1195 Open Redirection Vulnerability
BID:100495
Info
IBM Cúram Social Program Management CVE-2017-1195 Open Redirection Vulnerability
| Bugtraq ID: | 100495 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1195 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 14 2017 12:00AM |
| Updated: | Aug 14 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
IBM Cúram Social Program Management 6.0.5 IBM Cúram Social Program Management 7.0.0.1 IBM Cúram Social Program Management 7.0.0.0 IBM Cúram Social Program Management 6.2.0.4 IBM Cúram Social Program Management 6.2.0.3 IBM Cúram Social Program Management 6.2.0.2 IBM Cúram Social Program Management 6.2.0.1 IBM Cúram Social Program Management 6.2.0.0 IBM Cúram Social Program Management 6.1.1.4 IBM Cúram Social Program Management 6.1.1.3 IBM Cúram Social Program Management 6.1.1.2 IBM Cúram Social Program Management 6.1.1.1 IBM Cúram Social Program Management 6.1.1 IBM Cúram Social Program Management 6.1.0.4 IBM Cúram Social Program Management 6.1.0.3 IBM Cúram Social Program Management 6.1.0.2 IBM Cúram Social Program Management 6.1.0.1 IBM Cúram Social Program Management 6.1.0.0 IBM Cúram Social Program Management 6.0.5.9 IBM Cúram Social Program Management 6.0.5.8 IBM Cúram Social Program Management 6.0.5.7 IBM Cúram Social Program Management 6.0.5.6 IBM Cúram Social Program Management 6.0.5.5 IBM Cúram Social Program Management 6.0.5.4 IBM Cúram Social Program Management 6.0.5.3 IBM Cúram Social Program Management 6.0.5.2 IBM Cúram Social Program Management 6.0.5.10 IBM Cúram Social Program Management 6.0.5.1 IBM Cúram Social Program Management 6.0.5.0 IBM Cúram Social Program Management 6.0.4.9 IBM Cúram Social Program Management 6.0.4.8 IBM Cúram Social Program Management 6.0.4.7 IBM Cúram Social Program Management 6.0.4.6 IBM Cúram Social Program Management 6.0.4.5 IBM Cúram Social Program Management 6.0.4.4 IBM Cúram Social Program Management 6.0.4.3 IBM Cúram Social Program Management 6.0.4.2 IBM Cúram Social Program Management 6.0.4.1 IBM Cúram Social Program Management 6.0.4.0 |
| Not Vulnerable: |
IBM Cúram Social Program Management 7.0.0.2 IBM Cúram Social Program Management 6.2.0.5 IBM Cúram Social Program Management 6.1.1.5 IBM Cúram Social Program Management 6.1.0.5 IBM Cúram Social Program Management 6.0.5.10 iFix1 IBM Cúram Social Program Management 6.0.4.9 iFix1 |
Discussion
IBM Cúram Social Program Management CVE-2017-1195 Open Redirection Vulnerability
IBM Cúram Social Program Management is prone to an open-redirection vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
IBM Cúram Social Program Management is prone to an open-redirection vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Solution / Fix
IBM Cúram Social Program Management CVE-2017-1195 Open Redirection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Cúram Social Program Management CVE-2017-1195 Open Redirection Vulnerability
References:
References: