{"id":"CVE-2022-35716","state":"PUBLISHED","title":"IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sens","description":"IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.","publishedAt":"2022-07-31T16:08:06.630Z","updatedAt":"2024-09-17T01:56:46.331Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/PR:L/UI:N/I:N/AV:N/C:H/AC:H/S:U/A:N/RC:C/RL:O/E:U","source":"ibm"},"assigner":"ibm","products":["IBM UrbanCode Deploy"],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","versions":[{"version":"7.0.0.0","status":"affected"},{"version":"7.1.0.0","status":"affected"},{"version":"7.2.0.0","status":"affected"},{"version":"6.2.0.0","status":"affected"},{"version":"6.2.7.16","status":"affected"},{"version":"7.0.5.11","status":"affected"},{"version":"7.1.2.7","status":"affected"},{"version":"7.2.3.0","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6608584","https://exchange.xforce.ibmcloud.com/vulnerabilities/231360"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:17.761Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/35xxx/CVE-2022-35716.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-35716","state":"PUBLISHED","datePublished":"2022-07-31T16:08:06.630Z","dateUpdated":"2024-09-17T01:56:46.331Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-07-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360."}],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","versions":[{"version":"7.0.0.0","status":"affected"},{"version":"7.1.0.0","status":"affected"},{"version":"7.2.0.0","status":"affected"},{"version":"6.2.0.0","status":"affected"},{"version":"6.2.7.16","status":"affected"},{"version":"7.0.5.11","status":"affected"},{"version":"7.1.2.7","status":"affected"},{"version":"7.2.3.0","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6608584","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/231360","name":"ibm-ucd-cve202235716-info-disc (231360)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/PR:L/UI:N/I:N/AV:N/C:H/AC:H/S:U/A:N/RC:C/RL:O/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2022-07-31T16:08:06.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2022-07-29T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2022-07-29T00:00:00","ID":"CVE-2022-35716","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"UrbanCode Deploy","version":{"version_data":[{"version_value":"7.0.0.0"},{"version_value":"7.1.0.0"},{"version_value":"7.2.0.0"},{"version_value":"6.2.0.0"},{"version_value":"6.2.7.16"},{"version_value":"7.0.5.11"},{"version_value":"7.1.2.7"},{"version_value":"7.2.3.0"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"N","C":"H","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6608584","refsource":"CONFIRM","title":"IBM Security Bulletin 6608584 (UrbanCode Deploy)","url":"https://www.ibm.com/support/pages/node/6608584"},{"name":"ibm-ucd-cve202235716-info-disc (231360)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/231360"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6608584","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/231360","name":"ibm-ucd-cve202235716-info-disc (231360)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T09:44:21.616Z"}}]}}}