Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pv7-j3wp-jhrp

Опубликовано: 27 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 5.4
nvd
11 месяцев назад

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-80