CVE-2016-8923

IBM Cúram Social Program Management (SMPM) 5.2, 6.0 and 7.0 contain an authenticated user privilege/visibility flaw that allows viewing sensitive information from higher-sensitivity profiles via a specially crafted URL. Affected VRMF ranges include 7.0.0.0, 6.2.x, 6.1.x, 6.0.x, and 5.2.x. IBM rem...