High severity7.5NVD Advisory· Published Oct 12, 2020· Updated Jun 17, 2026
CVE-2020-4778
CVE-2020-4778
Description
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
Affected products
4cpe:2.3:a:ibm:curam_social_program_management:7.0.10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:curam_social_program_management:7.0.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:curam_social_program_management:7.0.9.0:*:*:*:*:*:*:*
- (no CPE)range: 7.0.9, 7.0.10
- IBM/Curam SPMv5Range: 7.0.9
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/189156nvdVDB EntryVendor Advisory
- www.ibm.com/support/pages/node/6346575nvdVendor Advisory
News mentions
0No linked articles in our index yet.