Lucene search

IbmCVE-2022-35716

HistoryAug 01, 2022 - 11:15 a.m.

CVE-2022-35716

2022-08-0111:15:14

CWE-863

ibm

web.nvd.nist.gov

ibm

urbancode deploy

ucd

security vulnerability

information leakage

cve-2022-35716

nvd

x-force id 231360

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

34.8%

JSON

IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.

Affected configurations

Nvd

Vulners

Node

ibmurbancode_deployRange6.2.0.0–6.2.7.17

ibmurbancode_deployRange7.0.0.0–7.0.5.12

ibmurbancode_deployRange7.1.0.0–7.1.2.8

ibmurbancode_deployRange7.2.0.0–7.2.3.1

VendorProductVersionCPE
ibmurbancode_deploy*cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	urbancode_deploy	*	cpe:2.3:a:ibm:urbancode_deploy::::::::

CNA Affected

[
  {
    "product": "UrbanCode Deploy",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0.0"
      },
      {
        "status": "affected",
        "version": "7.1.0.0"
      },
      {
        "status": "affected",
        "version": "7.2.0.0"
      },
      {
        "status": "affected",
        "version": "6.2.0.0"
      },
      {
        "status": "affected",
        "version": "6.2.7.16"
      },
      {
        "status": "affected",
        "version": "7.0.5.11"
      },
      {
        "status": "affected",
        "version": "7.1.2.7"
      },
      {
        "status": "affected",
        "version": "7.2.3.0"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/231360

www.ibm.com/support/pages/node/6608584

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

34.8%

JSON

Related for CVE-2022-35716