Local User Disclosure of Sensitive Database Information in IBM UrbanCode Deploy

Local User Disclosure of Sensitive Database Information in IBM UrbanCode Deploy

CVE-2022-22367 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008.

Learn more about our User Device Pen Test.