Lucene search

IBM16103DE7D77821083B4D98C636659B64736DA6ED523B0A87FFAE4D4DA2DD1404

HistoryJul 15, 2022 - 3:32 p.m.

Security Bulletin: IBM UrbanCode Deploy (UCD) could disclose sensitive database information to a local user in plain text. (CVE-2022-22367)

2022-07-1515:32:27

www.ibm.com

ibm

urbancode deploy

sensitive information disclosure

plain text

database

cve-2022-22367

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.1%

JSON

Summary

Certain data for recurring activites may be internally stored in a plain text format.

Vulnerability Details

CVEID:CVE-2022-22367
**DESCRIPTION:**IBM UrbanCode Deploy (UCD) could disclose sensitive database information to a local user in plain text.
CVSS Base score: 4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/221008 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
UCD - IBM UrbanCode Deploy	7.2.0.0 - 7.2.2.1
UCD - IBM UrbanCode Deploy	7.1.0.0 - 7.1.2.6
UCD - IBM UrbanCode Deploy	7.0.0.0 - 7.0.5.10
UCD - IBM UrbanCode Deploy	6.0.0.0 - 6.2.7.15

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading to any of 6.2.716, 7.0.5.11, 7.1.2.7, 7.2.3.0 or later.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmurbancode_deployMatch7.2.3.0

VendorProductVersionCPE
ibmurbancode_deploy7.2.3.0cpe:2.3:a:ibm:urbancode_deploy:7.2.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	urbancode_deploy	7.2.3.0	cpe:2.3:a:ibm:urbancode_deploy:7.2.3.0:::::::*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.1%

JSON

Related for 16103DE7D77821083B4D98C636659B64736DA6ED523B0A87FFAE4D4DA2DD1404