CVE-2022-22366
First published: Mon Jun 20 2022(Updated: )
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 22106.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM UrbanCode Deploy | =6.2.7.15 | |
| IBM UrbanCode Deploy | =7.0.5.10 | |
| IBM UrbanCode Deploy | =7.1.2.6 | |
| IBM UrbanCode Deploy | =7.2.2.1 | |
| <=7.2.0.0 - 7.2.2.1 | ||
| <=7.1.0.0 - 7.1.2.6 | ||
| <=7.0.0.0 - 7.0.5.10 | ||
| <=6.0.0.0 - 6.2.7.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM UrbanCode Deploy issue?
The vulnerability ID for this IBM UrbanCode Deploy issue is CVE-2022-22366.
What is the severity rating of CVE-2022-22366?
CVE-2022-22366 has a severity rating of 4.9, which is considered medium.
Which versions of IBM UrbanCode Deploy are affected?
IBM UrbanCode Deploy versions 6.2.7.15 to 7.2.2.1 are affected by this vulnerability.
How does this vulnerability impact user credentials?
This vulnerability allows a local user to read user credentials stored in plain clear text.
Is there a fix available for this vulnerability?
Yes, IBM has provided fixes for the affected versions of IBM UrbanCode Deploy. Please refer to the official IBM support page for more details.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm urbancode deploy
- version/ibm urbancode deploy/6.2.7.15
- version/ibm urbancode deploy/7.0.5.10
- version/ibm urbancode deploy/7.1.2.6
- version/ibm urbancode deploy/7.2.2.1
- canonical/ibm ucd - ibm urbancode deploy
- version/ibm ucd - ibm urbancode deploy/7.2.0.0 - 7.2.2.1
- version/ibm ucd - ibm urbancode deploy/7.1.0.0 - 7.1.2.6
- version/ibm ucd - ibm urbancode deploy/7.0.0.0 - 7.0.5.10
- version/ibm ucd - ibm urbancode deploy/6.0.0.0 - 6.2.7.15