Security Bulletin: CVE-2019-4666 IBM UrbanCode Deploy (UCD) could allow a local user to obtain sensitive information by unmasking certain secure values in documents.

Summary IBM UrbanCode Deploy UCD could allow a local user to obtain sensitive information by unmasking certain secure values in documents. Vulnerability Details CVEID: CVE-2019-4666 DESCRIPTION: IBM UrbanCode Deploy UCD could allow a local user to obtain sensitive information by unmasking certain...

CVE-2019-4666

CVE-2019-4666 affects IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build (UCB) 6.1.5, where a local user could unmask certain secure values in documents to obtain sensitive information. The IBM bulletin notes a low-severity, local-access issue with CVSS v3.0 base score 2.3 (vector: AV:L/AC:...