{"containers": {"cna": {"affected": [{"product": "Cram Social Program Management", "vendor": "IBM", "versions": [{"status": "affected", "version": "6.0.5"}, {"status": "affected", "version": "6.1.1"}, {"status": "affected", "version": "6.2.0"}, {"status": "affected", "version": "7.0.1"}]}], "datePublic": "2018-01-12T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380."}], "problemTypes": [{"descriptions": [{"description": "Gain Privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-01-19T13:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22012528"}, {"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2018-01-12T00:00:00", "ID": "CVE-2018-1362", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Cram Social Program Management", "version": {"version_data": [{"version_value": "6.0.5"}, {"version_value": "6.1.1"}, {"version_value": "6.2.0"}, {"version_value": "7.0.1"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Privileges"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg22012528", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22012528"}, {"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T03:59:38.622Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22012528"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2018-1362", "datePublished": "2018-01-19T14:00:00Z", "dateReserved": "2017-12-13T00:00:00", "dateUpdated": "2024-09-16T19:30:47.699Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "89A3A8B1-8088-4FCC-A38C-96526201F159", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "1E303C07-8CB1-4EF8-82F3-4C2B3C664812", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:curam_social_program_management:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "4D7D9E2E-F969-456A-A3B0-E6ADD7C89A4B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380."}, {"lang": "es", "value": "IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0 y 7.0.1 en Citizen Portal podr\u00eda permitir que un usuario autenticado elimine aplicaciones enviadas por otro usuario del sistema y, posiblemente, obtenga privilegios. IBM X-Force ID: 137380."}], "id": "CVE-2018-1362", "lastModified": "2024-11-21T03:59:41.547", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 3.4, "source": "[email protected]", "type": "Primary"}]}, "published": "2018-01-19T14:29:00.337", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22012528"}, {"source": "[email protected]", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22012528"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{}