Ibm · Ibm Urbancode Deploy · CVE-2022-40751
**Name of the Vulnerable Software and Affected Versions**
IBM UrbanCode Deploy versions 6.2.7.0 through 6.2.7.17
IBM UrbanCode Deploy versions 7.0.0.0 through 7.0.5.12
IBM UrbanCode Deploy versions 7.1.0.0 through 7.1.2.8
IBM UrbanCode Deploy versions 7.2.0.0 through 7.2.3.1
**Description**
The issue allows a user with administrative privileges, including "Manage Security" permissions, to potentially recover a credential previously saved for performing authenticated LDAP searches.
**Recommendations**
For versions 6.2.7.0 through 6.2.7.17, update to a version outside of this range to resolve the issue.
For versions 7.0.0.0 through 7.0.5.12, update to a version outside of this range to resolve the issue.
For versions 7.1.0.0 through 7.1.2.8, update to a version outside of this range to resolve the issue.
For versions 7.2.0.0 through 7.2.3.1, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting access to administrative privileges, including "Manage Security" permissions, until a patch is available.