CVE-2024-45091: IBM UrbanCode Deploy information disclosure
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
Other sources
IBM UrbanCode Deploy (UCD) stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45091?
CVE-2024-45091 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2024-45091?
To resolve CVE-2024-45091, update IBM UrbanCode Deploy to the latest version where this vulnerability is patched.
Which versions of IBM UrbanCode Deploy are affected by CVE-2024-45091?
IBM UrbanCode Deploy versions 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 are affected by CVE-2024-45091.
What type of sensitive information is exposed in CVE-2024-45091?
CVE-2024-45091 may expose sensitive information stored in the log files that can be accessed by local users.
Who can exploit CVE-2024-45091?
Local users with access to HTTP request logs can exploit CVE-2024-45091 to read potentially sensitive information.