Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q778-q498-8cqq

Опубликовано: 17 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601.

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601.

EPSS

Процентиль: 32%
0.00128
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 4.9
nvd
около 3 лет назад

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches.  IBM X-Force ID:   236601.

EPSS

Процентиль: 32%
0.00128
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-522