CVE-2017-1740: XSS

Published Jan 11, 2018

Updated

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.

Affected Software

38 affected components

IBM Curam Social Program Management=6.0.5

IBM Curam Social Program Management=6.0.5.0

IBM Curam Social Program Management=6.0.5.1

IBM Curam Social Program Management=6.0.5.2

IBM Curam Social Program Management=6.0.5.3

IBM Curam Social Program Management=6.0.5.4

IBM Curam Social Program Management=6.0.5.5

IBM Curam Social Program Management=6.0.5.6

IBM Curam Social Program Management=6.0.5.7

IBM Curam Social Program Management=6.0.5.8

IBM Curam Social Program Management=6.0.5.9

IBM Curam Social Program Management=6.0.5.10

IBM Curam Social Program Management=6.1.0.0

IBM Curam Social Program Management=6.1.0.1

IBM Curam Social Program Management=6.1.0.2

IBM Curam Social Program Management=6.1.0.3

IBM Curam Social Program Management=6.1.0.4

IBM Curam Social Program Management=6.1.0.5

IBM Curam Social Program Management=6.1.1.0

IBM Curam Social Program Management=6.1.1.1

IBM Curam Social Program Management=6.1.1.2

IBM Curam Social Program Management=6.1.1.3

IBM Curam Social Program Management=6.1.1.4

IBM Curam Social Program Management=6.1.1.5

IBM Curam Social Program Management=6.1.1.6

IBM Curam Social Program Management=6.2.0.0

IBM Curam Social Program Management=6.2.0.1

IBM Curam Social Program Management=6.2.0.2

IBM Curam Social Program Management=6.2.0.3

IBM Curam Social Program Management=6.2.0.4

IBM Curam Social Program Management=6.2.0.5

IBM Curam Social Program Management=6.2.0.6

IBM Curam Social Program Management=7.0.0.0

IBM Curam Social Program Management=7.0.0.1

IBM Curam Social Program Management=7.0.0.2

IBM Curam Social Program Management=7.0.1.0

IBM Curam Social Program Management=7.0.1.1

IBM Curam Social Program Management=7.0.2.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22012372

Event History

Jan 11, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1740?

The severity of CVE-2017-1740 is medium with a score of 5.4.

What is the description of CVE-2017-1740?

CVE-2017-1740 is a vulnerability in IBM Curam Social Program Management that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted environment.

How does CVE-2017-1740 affect IBM Curam Social Program Management?

CVE-2017-1740 affects IBM Curam Social Program Management versions 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2.

How can the vulnerability CVE-2017-1740 be fixed?

To fix CVE-2017-1740, users should apply the necessary security patches provided by IBM.

Where can I find more information about CVE-2017-1740?

More information about CVE-2017-1740 can be found on the IBM Support website, the SecurityFocus website, and the IBM X-Force Exchange.