IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Urbancode_deploy | Ibm | 6.2.0.0 (including) | 6.2.7.20 (excluding) |
| Urbancode_deploy | Ibm | 7.0.0.0 (including) | 7.0.5.15 (excluding) |
| Urbancode_deploy | Ibm | 7.1.0.0 (including) | 7.1.2.11 (excluding) |
| Urbancode_deploy | Ibm | 7.2.0.0 (including) | 7.2.3.4 (excluding) |
| Urbancode_deploy | Ibm | 7.3.0.0 (including) | 7.3.1.0 (excluding) |