March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2022-22373 – IBM InfoSphere Information Server Vulnerability
July 3, 2022
Rewterz Threat Advisory – CVE-2022-34777 – Jenkins GitLab Plugin Vulnerability
July 3, 2022
Rewterz Threat Advisory – CVE-2022-22373 – IBM InfoSphere Information Server Vulnerability
July 3, 2022
Rewterz Threat Advisory – CVE-2022-34777 – Jenkins GitLab Plugin Vulnerability
July 3, 2022
Severity
Medium
Analysis Summary
CVE-2022-22367 CVSS:4
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text.
CVE-2022-22366 CVSS:4.9
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-22367
- CVE-2022-22366
Affected Vendors
IBM
Affected Products
- IBM UrbanCode Deploy 6.2.7.15
- IBM UrbanCode Deploy 7.0.5.10
- IBM UrbanCode Deploy 7.1.2.6
- IBM UrbanCode Deploy 7.2.2.1
Remediation
Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.