Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-22347 EUVD-2024-19908GHSA-x8gx-r9p5-6xp8

IBM UrbanCode Velocity information disclosure

Published Jan 20, 2025 · Updated Jan 21, 2025 · Assigned by ibm

Description

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected products

VendorProductAffectedFixed
IBM UrbanCode Velocity 4.0.0 – ≤ 4.0.25 —
IBM DevOps Velocity 5.0.0 —

References