Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r392-2grh-9xm9

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.

IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.

EPSS

Процентиль: 83%
0.01835
Низкий

Связанные уязвимости

nvd
больше 10 лет назад

IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.

EPSS

Процентиль: 83%
0.01835
Низкий