Vulnerability Name: | CVE-2022-35716 (CCN-231360) | ||||||||||||
Assigned: | 2022-07-29 | ||||||||||||
Published: | 2022-07-29 | ||||||||||||
Updated: | 2022-08-05 | ||||||||||||
Summary: | IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360. | ||||||||||||
CVSS v3 Severity: | 6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) 5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 4.9 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:C/I:N/A:N)
| ||||||||||||
Vulnerability Type: | CWE-668 | ||||||||||||
Vulnerability Consequences: | Obtain Information | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2022-35716 Source: XF Type: UNKNOWN ibm-ucd-cve202235716-info-disc(231360) Source: XF Type: VDB Entry, Vendor Advisory ibm-ucd-cve202235716-info-disc (231360) Source: CCN Type: IBM Security Bulletin 6608584 (UrbanCode Deploy) Urbancode Deploy is vulnerable to incorrect authorization reading Component Processes ( CVE-2022-35716 ) Source: CONFIRM Type: Patch, Vendor Advisory https://www.ibm.com/support/pages/node/6608584 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
BACK |