Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-40376 EUVD-2023-44947GHSA-mjp6-789g-5x22

IBM UrbanCode Deploy (UCD) improper authentication controls

Published Oct 4, 2023 · Updated Sep 19, 2024 · Assigned by ibm

Description

IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581.

Affected products

VendorProductAffectedFixed
IBM UrbanCode Deploy 7.1 – ≤ 7.1.2.12, 7.2 – ≤ 7.2.3.5, 7.3 – ≤ 7.3.2.0 —

References