Description
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensitive information in log files that could be read by a local user.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- ibm / devops_deploy8.0.0.0 – 8.0.1.14
- ibm / ucd_ibm_devops_deploy8.1 – 8.1
- ibm / ucd_ibm_devops_deploy8.1.0 – 8.1.0
- ibm / ucd_ibm_devops_deploy8.1.2.6 – 8.1.2.6
- ibm / ucd_ibm_devops_deploy8.0 – 8.0
- ibm / ucd_ibm_devops_deploy8.0.0 – 8.0.0
- ibm / ucd_ibm_devops_deploy8.0.1.13 – 8.0.1.13
- ibm / ucd_ibm_devops_deploy8.1 – 8.1
- ibm / ucd_ibm_devops_deploy8.1.0 – 8.1.0
- ibm / ucd_ibm_devops_deploy8.1.2.6 – 8.1.2.6
- ibm / ucd_ibm_devops_deploy8.2 – 8.2
- ibm / ucd_ibm_devops_deploy8.2.0 – 8.2.0
- ibm / ucd_ibm_devops_deploy8.2 – 8.2
- ibm / ucd_ibm_devops_deploy8.2.0 – 8.2.0
- ibm / ucd_ibm_devops_deploy8.2.1.0 – 8.2.1.0
- ibm / ucd_ibm_devops_deploy8.2.1.0 – 8.2.1.0
- ibm / ucd_ibm_devops_deploy8.0 – 8.0
- ibm / ucd_ibm_devops_deploy8.0.1.13 – 8.0.1.13
- ibm / ucd_ibm_devops_deploy8.0.0 – 8.0.0
- ibm / ucd_ibm_urbancode_deploy7.2 – 7.2
- ibm / ucd_ibm_urbancode_deploy7.2.0 – 7.2.0
- ibm / ucd_ibm_urbancode_deploy7.2.3.23 – 7.2.3.23
- ibm / ucd_ibm_urbancode_deploy7.3 – 7.3
- ibm / ucd_ibm_urbancode_deploy7.3.0 – 7.3.0
- ibm / ucd_ibm_urbancode_deploy7.3.2.18 – 7.3.2.18
- ibm / ucd_ibm_urbancode_deploy7.2 – 7.2
- ibm / ucd_ibm_urbancode_deploy7.2.0 – 7.2.0
- ibm / ucd_ibm_urbancode_deploy7.2.3.23 – 7.2.3.23
- ibm / ucd_ibm_urbancode_deploy7.3 – 7.3
- ibm / ucd_ibm_urbancode_deploy7.3.0 – 7.3.0
- ibm / ucd_ibm_urbancode_deploy7.3.2.18 – 7.3.2.18
- ibm / urbancode_deploy7.2.0.0 – 7.2.3.24
References
Updated 33m ago · 8 sources