IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Urbancode_deploy | Ibm | 6.2.7.15 (including) | 6.2.7.15 (including) |
| Urbancode_deploy | Ibm | 7.0.5.10 (including) | 7.0.5.10 (including) |
| Urbancode_deploy | Ibm | 7.1.2.6 (including) | 7.1.2.6 (including) |
| Urbancode_deploy | Ibm | 7.2.2.1 (including) | 7.2.2.1 (including) |