Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-22339 EUVD-2024-19900GHSA-75rx-c73c-98q9

IBM UrbanCode Deploy information disclosure

Published Apr 12, 2024 · Updated Aug 1, 2024 · Assigned by ibm

Description

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfuscation of sensitive values from some log files. IBM X-Force ID: 279979.

Affected products

VendorProductAffectedFixed
IBM UrbanCode Deploy 7.0 – ≤ 7.0.5.20, 7.1 – ≤ 7.1.2.16, 7.2 – ≤ 7.2.3.9, 7.3 – ≤ 7.3.2.4 —
IBM DevOps Deploy 8.0 – ≤ 8.0.0.1 —

References