IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including Manage Security permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID:
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Urbancode_deploy | Ibm | 6.2.7.0 (including) | 6.2.7.18 (excluding) |
| Urbancode_deploy | Ibm | 7.0.0.0 (including) | 7.0.5.13 (excluding) |
| Urbancode_deploy | Ibm | 7.1.0.0 (including) | 7.1.2.9 (excluding) |
| Urbancode_deploy | Ibm | 7.2.0.0 (including) | 7.2.3.2 (excluding) |