description: IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.
problem types: Obtain Information
affected:
{
product: UrbanCode Deploy
vendor: IBM
versions:
status: affected, version: 7.0.0.0
status: affected, version: 7.1.0.0
status: affected, version: 7.2.0.0
status: affected, version: 6.2.0.0
status: affected, version: 6.2.7.16
status: affected, version: 7.0.5.11
status: affected, version: 7.1.2.7
status: affected, version: 7.2.3.0
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 4.6
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/PR:L/UI:N/I:N/AV:N/C:H/AC:H/S:U/A:N/RC:C/RL:O/E:U
version: 3.0
]