Findings

CVE-2025-36364

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

Published Mar 3, 2026 · updated Jul 27, 2026 · hcltech devops plan

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 3, 2026 · NIST NVD

    Detected

    IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

  2. Jul 27, 2026 · NIST NVD

    Updated

    IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

Affected

  • cpe hcltech/devops planversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-36364

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-36364

    IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

    nvd.nist.gov

References