CVE-2020-4778: High severity ibm curam social program management vulnerability
Published Oct 12, 2020
·Updated
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
Affected Software
2 affected components
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
Event History
Oct 12, 2020
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-4778?
CVE-2020-4778 is a vulnerability in IBM Curam Social Program Management 7.0.9 and 7.0.10.
2
What is the severity of CVE-2020-4778?
CVE-2020-4778 has a severity rating of 7.5 (high).
3
How does CVE-2020-4778 affect IBM Curam Social Program Management?
CVE-2020-4778 affects IBM Curam Social Program Management 7.0.9 and 7.0.10.
4
What is the vulnerability ID for IBM Curam Social Program Management?
The vulnerability ID for IBM Curam Social Program Management is CVE-2020-4778.
5
How can I fix CVE-2020-4778?
To fix CVE-2020-4778, update IBM Curam Social Program Management to a version that uses the SHA-256 cryptographic algorithm instead of MD5.