CVE Catalog

CVE-2025-36364

MediumCVSS 6.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

IBM DevOps Plan 3.0.0 through 3.0.5 stores web page cache locally, allowing another system user to read it.

Risk Assessment

A local user can access sensitive data stored in another user's cache, leading to information disclosure.

Recommendation

Update IBM DevOps Plan to the latest patched version.

Original NVD description (English source)

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS