{"id":"CVE-2017-1286","aliases":["EUVD-2017-10302","GHSA-cpw6-3m7w-xvrc"],"status":"published","title":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0...","description":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01297,"percentile":0.70549,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-08-13T16:00:00Z","modified":"2026-06-17T01:14:11Z","products":[{"vendor":"ibm","product":"urbancode_deploy"}],"references":[{"url":"https://www.ibm.com/support/docview.wss?uid=swg2C1000377","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125147","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1286"},{"url":"https://github.com/advisories/GHSA-cpw6-3m7w-xvrc"}],"sources":{"cve":[{"id":"CVE-2017-1286","description":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.","status":"published","published":"2018-08-13T16:00:00Z","modified":"2024-08-05T13:32:28.479Z","updated_at":"2026-11-02T14:33:19.548789Z"}],"euvd":[{"id":"EUVD-2017-10302","description":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.","status":"published","published":"2018-08-13T16:00:00Z","modified":"2024-08-05T13:32:28Z","updated_at":"2026-11-03T02:39:22.420171Z"}],"ghsa":[{"id":"GHSA-cpw6-3m7w-xvrc","title":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0...","description":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.","status":"published","published":"2022-05-14T02:45:30Z","modified":"2023-02-02T05:06:32Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:52:19.633418Z"}],"nvd":[{"id":"CVE-2017-1286","description":"Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.","status":"published","published":"2018-08-13T16:29:00.37Z","modified":"2026-06-17T01:14:11.553Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:18.679411Z"}]}}