CVE-2024-22339CWE-532

IBM UrbanCode Deploy information disclosure

Medium · published April 12, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfuscation of sensitive values from some log files. IBM X-Force ID: 279979.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-04-12T16:51Z
EPSS history
Timeline
  • 12 APR 16:51Z
    IBM UrbanCode Deploy information disclosure
    cvelistv5