IBM UrbanCode Deploy CVE-2017-1752 Information Disclosure Vulnerability

Bugtraq ID:	104289
Class:	Design Error
CVE:	CVE-2017-1752
Remote:	Yes
Local:	No
Published:	May 22 2018 12:00AM
Updated:	May 22 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM UrbanCode Deploy 6.2.5 IBM UrbanCode Deploy 6.2.4 IBM UrbanCode Deploy 6.2.3 IBM UrbanCode Deploy 6.2.2 IBM UrbanCode Deploy 6.2.1 IBM UrbanCode Deploy 6.1.3 IBM UrbanCode Deploy 6.1.2 IBM UrbanCode Deploy 6.1.1 IBM UrbanCode Deploy 6.2.7.0 IBM UrbanCode Deploy 6.2.6.1 IBM UrbanCode Deploy 6.2.5.1 IBM UrbanCode Deploy 6.2.4.2 IBM UrbanCode Deploy 6.2.4.1 IBM UrbanCode Deploy 6.2.3.1 IBM UrbanCode Deploy 6.2.3.0 IBM UrbanCode Deploy 6.2.2.1 IBM UrbanCode Deploy 6.2.1.2 IBM UrbanCode Deploy 6.2.1.1 IBM UrbanCode Deploy 6.2.0.2 IBM UrbanCode Deploy 6.2.0.1 IBM UrbanCode Deploy 6.2 IBM UrbanCode Deploy 6.1.3.8 IBM UrbanCode Deploy 6.1.3.7 IBM UrbanCode Deploy 6.1.3.6 IBM UrbanCode Deploy 6.1.3.5 IBM UrbanCode Deploy 6.1.3.4 IBM UrbanCode Deploy 6.1.3.3 IBM UrbanCode Deploy 6.1.3.2 IBM UrbanCode Deploy 6.1.3.1 IBM UrbanCode Deploy 6.1.1.8 IBM UrbanCode Deploy 6.1.1.7 IBM UrbanCode Deploy 6.1.1.6 IBM UrbanCode Deploy 6.1.1.5 IBM UrbanCode Deploy 6.1.1.4 IBM UrbanCode Deploy 6.1.1.3 IBM UrbanCode Deploy 6.1.1.2 IBM UrbanCode Deploy 6.1.1.1 IBM UrbanCode Deploy 6.1.0.4 IBM UrbanCode Deploy 6.1.0.3 IBM UrbanCode Deploy 6.1.0.2 IBM UrbanCode Deploy 6.1.0.1 IBM UrbanCode Deploy 6.1
Not Vulnerable:	IBM UrbanCode Deploy 6.2.7.1

IBM UrbanCode Deploy CVE-2017-1752 Information Disclosure Vulnerability

IBM UrbanCode Deploy is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.

UrbanCode Deploy 6.1 through 6.1.3.8 and IBM UrbanCode Deploy 6.2 through 6.2.7.0 are vulnerable.

IBM UrbanCode Deploy CVE-2017-1752 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.