6.2Mittel
CVE-2025-36364IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
Beschreibung
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
Schwachstellentyp (CWE):
CWE-525
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| hcltech | devops plan | 3.0.0 – < 3.0.6 | |
| IBM | DevOps Plan | 3.0.0 – ≤ 3.0.5 |
Referenzen und Patches
- https://www.ibm.com/support/pages/node/7261930 vendor-advisorypatchVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:hcltech:devops_plan:*:*:*:*:*:*:*:*≥ 3.0.0 < 3.0.6