Lucene search

K
nvd[email protected]NVD:CVE-2022-35716
HistoryAug 01, 2022 - 11:15 a.m.

CVE-2022-35716

2022-08-0111:15:14
CWE-863
web.nvd.nist.gov
5
ibm urbancode deploy
6.2.0.0
6.2.7.16
7.0.0.0
7.0.5.11
7.1.0.0
7.1.2.7
7.2.0.0
7.2.3.0
authenticated user
sensitive information
improper security checking
ibm x-force id
231360

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

34.8%

IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.

Affected configurations

Nvd
Node
ibmurbancode_deployRange6.2.0.06.2.7.17
OR
ibmurbancode_deployRange7.0.0.07.0.5.12
OR
ibmurbancode_deployRange7.1.0.07.1.2.8
OR
ibmurbancode_deployRange7.2.0.07.2.3.1
VendorProductVersionCPE
ibmurbancode_deploy*cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

34.8%

Related for NVD:CVE-2022-35716