CVE-2020-4944

Published: Mar 30, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. IBM X-Force ID: 191944.

Affected (8)

Products: Ibm: Urbancode Deploy

Ibm

1 product

Urbancode Deploy

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Urbancode Deploy	Version 7.0.3.0
Ibm Urbancode Deploy	Version 7.0.4.0
Ibm Urbancode Deploy	Version 7.0.5.3
Ibm Urbancode Deploy	Version 7.0.5.4
Ibm Urbancode Deploy	Version 7.1.0.0
Ibm Urbancode Deploy	Version 7.1.1.0
Ibm Urbancode Deploy	Version 7.1.1.1
Ibm Urbancode Deploy	Version 7.1.1.2