1. CVE-Search
  2. CVE-2018-1654
ID CVE-2018-1654
Summary IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 144747.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:6.2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:curam_social_program_management:7.0.3.0:*:*:*:*:*:*:*
CVSS
Base: 5.8 (as of 09-10-2019 - 23:38)
Impact:
Exploitability:
CWE CWE-601
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
refmap via4
bid 106187
confirm https://www.ibm.com/support/docview.wss?uid=ibm10739027
xf ibm-curam-cve20181654-open-redirect(144747)
Last major update 09-10-2019 - 23:38
Published 11-12-2018 - 16:29
Last modified 09-10-2019 - 23:38
Back to Top