CVE-2024-45091CWE-532

IBM UrbanCode Deploy information disclosure

Medium · published January 21, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00205 · 9.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-01-21T00:41Z
EPSS history
Timeline
  • 21 JAN 00:41Z
    IBM UrbanCode Deploy information disclosure
    cvelistv5