Vulnerabilities > IBM > Urbancode Deploy > 6.2.7.103

DATE CVE VULNERABILITY TITLE RISK
2020-04-23 CVE-2019-4668 Insufficiently Protected Credentials vulnerability in IBM Urbancode Deploy
IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user.
local
low complexity
ibm CWE-522
2.1
2020-02-13 CVE-2019-4666 Unspecified vulnerability in IBM Urbancode Build and Urbancode Deploy
IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certain secure values in documents.
local
low complexity
ibm
2.1
2018-08-13 CVE-2017-1749 Path Traversal vulnerability in IBM Urbancode Deploy
IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system.
network
low complexity
ibm CWE-22
5.0
2018-08-13 CVE-2017-1286 Information Exposure vulnerability in IBM Urbancode Deploy
Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked.
network
low complexity
ibm CWE-200
4.0