Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-13489 EUVD-2025-203439GHSA-7m3h-x75f-vj4x

IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information

Published Dec 15, 2025 · Updated Dec 26, 2025 · Assigned by ibm

Description

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected products

VendorProductAffectedFixed
IBM UCD - IBM DevOps Deploy 8.1 – ≤ 8.1.2.3 —

References