Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-14148 EUVD-2025-203440GHSA-4jrc-v4m5-g6r4

IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability

Published Dec 15, 2025 · Updated Dec 15, 2025 · Assigned by ibm

Description

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.

Affected products

VendorProductAffectedFixed
IBM UCD - IBM DevOps Deploy 8.1 – ≤ 8.1.2.3 —

References