| Package | Affected versions | Patched versions |
|---|---|---|
| urbancode deploy | = 6.0= 6.0.1.0= 6.0.1.1= 6.0.1.10= 6.0.1.11= 6.0.1.12= 6.0.1.2= 6.0.1.3= 6.0.1.4= 6.0.1.5= 6.0.1.6= 6.0.1.7= 6.0.1.8= 6.0.1.9= 6.1= 6.1.0.1= 6.1.0.2= 6.1.0.3= 6.1.0.4= 6.1.1.0= 6.1.1.1= 6.1.1.2= 6.1.1.3= 6.1.1.4= 6.1.1.5= 6.1.1.6= 6.1.1.7= 6.1.1.8= 6.1.2= 6.1.3= 6.1.3.1= 6.1.3.2= 6.2.0.0= 6.2.0.1= 6.2.0.2= 6.2.1 |
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free