CVE-2024-22349CWE-525
IBM UrbanCode Velocity information disclosure
Medium · published January 20, 2025
What it is
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.
The record
Technical detail
- CVSS v3.1
- 4.0 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00212 · 10.9th percentile
- Weakness
- CWE-525 · Use of Web Browser Cache Containing Sensitive Information
- Published
- 2025-01-20T17:42Z
EPSS history
Timeline