CVE-2017-1286

Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-08-13

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Urbancode Deploy (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/125147
• https://www.ibm.com/support/docview.wss?uid=swg2C1000377