Information Disclosure in IBM UrbanCode Deploy Affects Numerous Versions
CVE-2022-22367

4MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
30 June 2022

Summary

IBM UrbanCode Deploy versions 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 are vulnerable to an information disclosure issue that allows a local user to gain access to sensitive database information in plain text. This vulnerability highlights the importance of securing access controls to prevent unauthorized access to sensitive data. Mitigating this issue is crucial for maintaining the integrity and confidentiality of your systems.

Affected Version(s)

UrbanCode Deploy 6.2.7.15

UrbanCode Deploy 7.0.5.10

UrbanCode Deploy 7.1.2.6

References

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.