IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.Referenceshttp://www.securityfocus.com/bid/73947http://www-01.ibm.com/support/docview.wss?uid=swg21700098
