CVE-2017-1286
MEDIUMIBM UrbanCode Deploy 6.1-6.9.6.0 - Exposure of Sensitive Configuration Information
Title source: llmDescription
Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.
References (2)
Core 2
Core References
Broken Link, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=swg2C1000377
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/125147
Scores
CVSS v3
6.5
EPSS
0.0131
EPSS Percentile
67.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (1)
ibm/urbancode_deploy
6.1 - 6.9.6.0
Published
Aug 13, 2018
Tracked Since
Feb 18, 2026