Security Bulletin: Secure Properties In Processes Can Be Revealed (CVE-2019-4168)

Summary

IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system.

Vulnerability Details

CVEID: CVE-2019-4168 DESCRIPTION: IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system.
CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/158701&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

All fixpacks of IBM UrbanCode Deploy 7.0 - 7.0.2.2 and IBM UrbanCode Deploy 6.2 - 6.2.7.4 are affected.

Remediation/Fixes

Upgrade to IBM UrbanCode Deploy 7.0.2.3 or later. If it is not possible to upgrade to 7.0.2.3 upgrade to IBM UrbanCode Deploy 6.2.7.5.

Workarounds and Mitigations

None