Description
IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 190908.
CVSS breakdown
CVSS 3.0
Confidentiality
High
Attack Vector
Local
Availability
None
User Interaction
None
Attack Complexity
Low
Integrity
None
Privileges Required
None
Scope
Unchanged
RL
O
E
Unchanged
RC
Changed
Affected products
- ibm / urbancode_deploy6.2.7.9 – 6.2.7.9
- ibm / urbancode_deploy7.0.5.4 – 7.0.5.4
- ibm / urbancode_deploy7.1.1.1 – 7.1.1.1