Skip to main content

Devops Plan CVE-2025-36364

MEDIUM
Use of Web Browser Cache Containing Sensitive Information (CWE-525)
2026-03-03 psirt@us.ibm.com
IBM Devops Plan
6.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.2 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:05 vuln.today
CVE Published
Mar 03, 2026 - 20:16 nvd
MEDIUM 6.2

DescriptionCVE.org

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

AnalysisAI

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system. [CVSS 6.2 MEDIUM]

Technical ContextAI

Affects Devops Plan. IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

RemediationAI

Monitor vendor advisories for a patch.

More in Devops Plan

View all
CVE-2026-4096 MEDIUM
6.1 Jun 11

HTTP header injection in IBM DevOps Plan 3.0.0 through 3.0.6 allows unauthenticated remote attackers to inject arbitrary
CVE-2025-36363 MEDIUM
5.9 Mar 03

Devops Plan versions up to 3.0.5 is affected by improper restriction of excessive authentication attempts (CVSS 5.9).

Same weakness CWE-525 – Use of Web Browser Cache Containing Sensitive Information

View all
CVE-2025-48947 HIGH
7.7
CVE-2025-15554 MEDIUM
6.0
CVE-2026-41918 MEDIUM
5.9
CVE-2026-24437 MEDIUM
5.5
CVE-2026-41322 MEDIUM
5.3
CVE-2025-1334 MEDIUM
4.0
CVE-2025-1348 MEDIUM
4.0
CVE-2025-52625 LOW
3.7

Share

CVE-2025-36364 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy