Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-42013 EUVD-2023-46472GHSA-hwgp-86hh-xvg8

IBM UrbanCode Deploy information disclosure

Published Dec 19, 2023 · Updated Aug 2, 2024 · Assigned by ibm

Description

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 265510.

Affected products

VendorProductAffectedFixed
IBM UrbanCode Deploy 7.1 – ≤ 7.1.2.14, 7.2 – ≤ 7.2.3.7, 7.3 – ≤ 7.3.2.2 —

References