IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 190908.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Urbancode_deploy | Ibm | 6.2.7.9 (including) | 6.2.7.9 (including) |
| Urbancode_deploy | Ibm | 7.0.5.4 (including) | 7.0.5.4 (including) |
| Urbancode_deploy | Ibm | 7.1.1.1 (including) | 7.1.1.1 (including) |