{"id":"CVE-2018-1362","state":"PUBLISHED","title":"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the ","description":"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.","publishedAt":"2018-01-19T14:00:00.000Z","updatedAt":"2024-09-16T19:30:47.699Z","severity":null,"assigner":"ibm","products":["IBM Cram Social Program Management"],"affected":[{"vendor":"IBM","product":"Cram Social Program Management","versions":[{"version":"6.0.5","status":"affected"},{"version":"6.1.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"7.0.1","status":"affected"}]}],"references":["http://www.ibm.com/support/docview.wss?uid=swg22012528","https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1362.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1362","state":"PUBLISHED","datePublished":"2018-01-19T14:00:00.000Z","dateUpdated":"2024-09-16T19:30:47.699Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2017-12-13T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380."}],"affected":[{"vendor":"IBM","product":"Cram Social Program Management","versions":[{"version":"6.0.5","status":"affected"},{"version":"6.1.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"7.0.1","status":"affected"}]}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22012528","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/137380","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Gain Privileges","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2018-01-19T13:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2018-01-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2018-01-12T00:00:00","ID":"CVE-2018-1362","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Cram Social Program Management","version":{"version_data":[{"version_value":"6.0.5"},{"version_value":"6.1.1"},{"version_value":"6.2.0"},{"version_value":"7.0.1"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Privileges"}]}]},"references":{"reference_data":[{"name":"http://www.ibm.com/support/docview.wss?uid=swg22012528","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg22012528"},{"name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/137380","refsource":"MISC","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/137380"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22012528","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/137380","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T03:59:38.622Z"}}]}}}