CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2022-40751 – IBM UrbanCode Deploy information disclosure
https://notcve.org/view.php?id=CVE-2022-40751
17 Nov 2022 — IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601. IBM UrbanCode Deploy (UCD) 6.2.7.0 a 6.2.7.17, 7.0.0.0 a 7.0.5.12, 7.1.0.0 a 7.1.2.8 y 7.2.0.0 a 7.2.3.1 podría permitir a un usuario con privilegios administrativos, in... • https://exchange.xforce.ibmcloud.com/vulnerabilities/236601 • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-35716
https://notcve.org/view.php?id=CVE-2022-35716
31 Jul 2022 — IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360. IBM UrbanCode Deploy (UCD) versiones 6.2.0.0 hasta 6.2.7.16, 7.0.0 hasta 7.0.5.11, 7.1.0.0 hasta 7.1.2.7 y 7.2.0.0 hasta 7.2.3.0, podrían permitir a un usuario autenticado obtener información confidencial en algunos casos debido a una co... • https://exchange.xforce.ibmcloud.com/vulnerabilities/231360 • CWE-863: Incorrect Authorization •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22367
https://notcve.org/view.php?id=CVE-2022-22367
01 Jul 2022 — IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008. IBM UrbanCode Deploy (UCD) versiones 6.2.7.15, 7.0.5.10, 7.1.2.6 y 7.2.2.1, podría divulgar información confidencial de la base de datos a un usuario local en texto plano. IBM X-Force ID: 221008 • https://exchange.xforce.ibmcloud.com/vulnerabilities/221008 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 4.9EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22366
https://notcve.org/view.php?id=CVE-2022-22366
01 Jul 2022 — IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 22106. IBM UrbanCode Deploy (UCD) versiones 6.2.7.15, 7.0.5.10, 7.1.2.6 y 7.2.2.1, almacena credenciales de usuario en texto sin cifrar que puede leer un usuario local. IBM X-Force ID: 22106 • https://exchange.xforce.ibmcloud.com/vulnerabilities/221006 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 21EXPL: 0CVE-2021-39082
https://notcve.org/view.php?id=CVE-2021-39082
29 Apr 2022 — IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM UrbanCode Deploy (UCD) versión 7.1.1.2, usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial • https://exchange.xforce.ibmcloud.com/vulnerabilities/215693 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22315
https://notcve.org/view.php?id=CVE-2022-22315
27 Apr 2022 — IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privileges due to improper handling of permissions. IBM X-Force ID: 217955. IBM UrbanCode Deploy (UCD) versión 7.2.2.1, podría permitir a un usuario autenticado con permisos especiales obtener altos privilegios debido a un manejo inapropiado de permisos. IBM X-Force ID: 217955 • https://exchange.xforce.ibmcloud.com/vulnerabilities/217955 •