6.2Media
CVE-2025-36364IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
Descripción
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
Debilidad (CWE):
CWE-525
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| hcltech | devops plan | 3.0.0 – < 3.0.6 | |
| IBM | DevOps Plan | 3.0.0 – ≤ 3.0.5 |
Referencias y parches
- https://www.ibm.com/support/pages/node/7261930 vendor-advisorypatchVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:hcltech:devops_plan:*:*:*:*:*:*:*:*≥ 3.0.0 < 3.0.6