Security Bulletin: Fix available for Sensitive Data Exposure Vulnerability in IBM Cúram Social Program Management (CVE-2016-9978)

Summary IBM Cúram Social Program Management is vulnerable to an already authenticated user bypassing the Security Sensitivity controls via a specially crafted URL. This allows an attacker to view information for certain business objects tagged with higher sensitivity than their current sensitivit...

CVE-2016-9978

IBM Curam Social Program Management (Cúram) versions affected: 5.2.0.0–5.2.0 SP6, 6.0.x and 6.2.x up to 6.2.0.3/6.2.0.4, 6.1.x up to 6.1.1.4, and 7.0.0.0–7.0.0.0. An authenticated attacker could bypass Security Sensitivity controls via a specially crafted URL to disclose information tied to highe...