Lucene search
+L

3038 matches found

NVD
NVD
•added 2022/11/17 5:15 p.m.•28 views

CVE-2022-40751

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

4.9CVSS0.00628EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/11/17 5:15 p.m.•20 views

CVE-2022-40751

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

4.9CVSS5.8AI score0.00628EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/17 5:15 p.m.•29 views

Code injection

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

3.3CVSS4.9AI score0.00628EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/17 4:36 p.m.•12 views

CVE-2022-40751 IBM UrbanCode Deploy information disclosure

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

4.9CVSS4.9AI score0.00628EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/17 4:36 p.m.•37 views

CVE-2022-40751 IBM UrbanCode Deploy information disclosure

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

4.9CVSS5.1AI score0.00628EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/17 4:36 p.m.•94 views

CVE-2022-40751

CVE-2022-40751 affects IBM UrbanCode Deploy (UCD) versions: 6.2.7.0–6.2.7.17; 7.0.0.0–7.0.5.12; 7.1.0.0–7.1.2.8; 7.2.0.0–7.2.3.1. An administrator with "Manage Security" permissions could recover credentials saved for LDAP authentication, exposing sensitive data. IBM X-Force ID: 236601. The fixed...

4.9CVSS4.9AI score0.00628EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•4 views

CVE-2022-40751: Insufficiently Protected Credentials

IBM UrbanCode Deploy UCD 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing...

4.9CVSS5.8AI score0.00628EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/17 12:00 a.m.•15 views

IBM UrbanCode Deploy 安全漏洞

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the automation of complex applications in...

4.9CVSS5.5AI score0.00628EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/17 12:00 a.m.•9 views

PT-2022-25511

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.2.7.0 through 6.2.7.17 IBM UrbanCode Deploy versions 7.0.0.0 through 7.0.5.12 IBM UrbanCode Deploy versions 7.1.0.0 through 7.1.2.8 IBM UrbanCode Deploy versions 7.2.0.0 through 7.2.3.1 Description The issue...

4.9CVSS5.7AI score0.00628EPSS
SaveExploits0References5
NVD
NVD
•added 2022/10/17 4:15 p.m.•30 views

CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

7.4CVSS0.0094EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/17 4:15 p.m.•32 views

Design/Logic Flaw

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token...

5CVSS5.2AI score0.00527EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/10/17 4:15 p.m.•29 views

CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

7.4CVSS6.9AI score0.0094EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/10/17 4:15 p.m.•19 views

UBUNTU-CVE-2022-3286

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token...

5.3CVSS6AI score0.00527EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/10/17 4:15 p.m.•11 views

UBUNTU-CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

7.4CVSS7AI score0.0094EPSS
SaveExploits0References3
Mend
Mend
•added 2022/10/17 12:00 a.m.•3 views

CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

8.5CVSS0.0094EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•6 views

CVE-2022-3286: Improper Access Control

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token...

5.3CVSS5.9AI score0.00527EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•11 views

CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

6.5CVSS7.2AI score0.0094EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•18 views

CVE-2022-3286

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token...

5.3CVSS6.8AI score0.00527EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/17 12:00 a.m.•11 views

PT-2022-21530 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.2 through 15.2.4 GitLab EE versions 15.3 through 15.3.3 GitLab EE versions 15.4 through 15.4.0 Description: The issue is related to a lack of IP address checking in GitLab EE, which allows a group member to bypass IP...

5.3CVSS4.8AI score0.00527EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•4 views

CVE-2022-2533: Improper Authentication

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions...

7.4CVSS6.7AI score0.0094EPSS
SaveExploits0References3
Rows per page
Query Builder