Medium · 6.2 CVE-2025-36364 EUVD-2025-208255GHSA-q52w-499f-86fq

IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.

Published Mar 3, 2026 · Updated Mar 4, 2026 · Assigned by ibm

Description

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

Vendor	Product	Affected	Fixed
IBM	DevOps Plan	3.0.0 – ≤ 3.0.5	—