CVE-2025-36162 - Vulnerability Details - OpenCVE

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Urbancode Deploy

No data.

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7243830

History

Tue, 02 Sep 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 02 Sep 2025 19:00:00 +0000

Type	Values Removed	Values Added
Description		IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.
Title		IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure
First Time appeared		Ibm Ibm urbancode Deploy
Weaknesses		CWE-497
CPEs		cpe:2.3:a:ibm:urbancode_deploy:8.1.2.1:::::::* cpe:2.3:a:ibm:urbancode_deploy:8.1:::::::*
Vendors & Products		Ibm Ibm urbancode Deploy
References		https://www.ibm.com/support/pages/node/7243830
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-09-02T18:52:08.189Z

Updated: 2025-09-02T19:46:21.658Z

Reserved: 2025-04-15T21:16:21.703Z

Link: CVE-2025-36162

Vulnrichment

Updated: 2025-09-02T19:46:18.462Z

NVD

Status : Received

Published: 2025-09-02T19:15:31.223

Modified: 2025-09-02T19:15:31.223

Link: CVE-2025-36162

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-36162", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T21:16:21.703Z", "datePublished": "2025-09-02T18:52:08.189Z", "dateUpdated": "2025-09-02T19:46:21.658Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:urbancode_deploy:8.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:urbancode_deploy:8.1.2.1:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "UrbanCode Deploy", "vendor": "IBM", "versions": [{"lessThanOrEqual": "8.1.2.1", "status": "affected", "version": "8.1", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system."}], "value": "IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-497", "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-09-02T18:52:08.189Z"}, "references": [{"tags": ["vendor-advisory", "patch"], "url": "https://www.ibm.com/support/pages/node/7243830"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>IBM strongly suggests the following:</p><p>Upgrade affected versions to: <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=ibm%7ERational&product=ibm/Rational/IBM+DevOps+Deploy&fixids=8.1.2.2-IBM-DevOps-Deploy&downloadMethod=http\">8.1.2.2</a> or later</p>\n\n<br>"}], "value": "IBM strongly suggests the following:\n\nUpgrade affected versions to: 8.1.2.2 https://www.ibm.com/support/fixcentral/swg/downloadFixes \u00a0or later"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-02T19:46:11.802301Z", "id": "CVE-2025-36162", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T19:46:21.658Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-36162", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-02T19:46:11.802301Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T19:46:18.462Z"}}], "cna": {"title": "IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:urbancode_deploy:8.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:urbancode_deploy:8.1.2.1:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "UrbanCode Deploy", "versions": [{"status": "affected", "version": "8.1", "versionType": "semver", "lessThanOrEqual": "8.1.2.1"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "IBM strongly suggests the following:\n\nUpgrade affected versions to: 8.1.2.2 https://www.ibm.com/support/fixcentral/swg/downloadFixes \u00a0or later", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly suggests the following:</p><p>Upgrade affected versions to: <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=ibm%7ERational&product=ibm/Rational/IBM+DevOps+Deploy&fixids=8.1.2.2-IBM-DevOps-Deploy&downloadMethod=http\">8.1.2.2</a> or later</p>\n\n<br>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7243830", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.", "supportingMedia": [{"type": "text/html", "value": "IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-497", "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-09-02T18:52:08.189Z"}}}, "cveMetadata": {"cveId": "CVE-2025-36162", "state": "PUBLISHED", "dateUpdated": "2025-09-02T19:46:21.658Z", "dateReserved": "2025-04-15T21:16:21.703Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-09-02T18:52:08.189Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}