Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
IBM DevOps Plan Local Cache Data Exposure
CVE-2025-36364
Summary
IBM DevOps Plan 3.0.0 through 3.0.5 stores web page cache locally, which can be accessed by other users on the system. This means that sensitive information, such as authentication details, can be viewed by unauthorized users. To mitigate this, update to a newer version of IBM DevOps Plan that fixes this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| ibm | devops_plan | > 3.0.0 , <= 3.0.6 | – |
Original title
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
Original description
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
nvd CVSS3.1
3.3
Vulnerability type
CWE-525
- https://www.ibm.com/support/pages/node/7261930 Vendor Advisory
Published: 3 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026