First published: Fri Sep 25 2020(Updated: )
IBM UrbanCode Deploy (UCD) could disclose sensitive information to an authenticated user that could be used in further attacks against the system.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM UCD - IBM UrbanCode Deploy | <=6.2.7.4 | |
IBM UCD - IBM UrbanCode Deploy | <=6.2.7.3 | |
IBM UCD - IBM UrbanCode Deploy | <=7.0.4.0 | |
IBM UCD - IBM UrbanCode Deploy | <=7.0.3.0 | |
IBM UCD - IBM UrbanCode Deploy | <=All | |
IBM UrbanCode Deploy | =6.2.7.3 | |
IBM UrbanCode Deploy | =6.2.7.4 | |
IBM UrbanCode Deploy | =7.0.3.0 | |
IBM UrbanCode Deploy | =7.0.4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-4484.
The title of this vulnerability is "IBM UrbanCode Deploy (UCD) could disclose sensitive information to an authenticated user."
The severity of CVE-2020-4484 is medium with a CVSS score of 4.3.
IBM UrbanCode Deploy versions 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 are affected by this vulnerability.
An authenticated user can exploit this vulnerability to gain access to sensitive information that could be used in further attacks against the system.