Описание
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 265510.
Ссылки
- VDB Entry
- Vendor Advisory
- VDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.0.0.0 (включая) до 7.0.5.18 (включая)Версия от 7.1.0.0 (включая) до 7.1.2.14 (включая)Версия от 7.2.0.0 (включая) до 7.2.3.7 (включая)Версия от 7.3.0.0 (включая) до 7.3.2.2 (включая)
Одно из
cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00052
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 5.3
github
около 2 лет назад
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 265510.
EPSS
Процентиль: 16%
0.00052
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-209