Severity
Medium
Analysis Summary
CVE-2022-22367 CVSS:4
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text.
CVE-2022-22366 CVSS:4.9
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-22367
- CVE-2022-22366
Affected Vendors
IBM
Affected Products
- IBM UrbanCode Deploy 6.2.7.15
- IBM UrbanCode Deploy 7.0.5.10
- IBM UrbanCode Deploy 7.1.2.6
- IBM UrbanCode Deploy 7.2.2.1
Remediation
Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.