Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-12086 EUVD-2026-40390GHSA-54jp-jq2r-6hfw

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability

Published Jun 30, 2026 · Updated Jul 30, 2026 · Assigned by ibm

Vendor: IBM Product: UCD - IBM DevOps Deploy Product: UCD - IBM UrbanCode Deploy

Description

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensitive information in log files that could be read by a local user.

Affected products

VendorProductAffectedFixed
IBM UCD - IBM UrbanCode Deploy 7.2 – ≤ 7.2.3.23, 7.3 – ≤ 7.3.2.18 —
IBM UCD - IBM DevOps Deploy 8.0 – ≤ 8.0.1.13, 8.1 – ≤ 8.1.2.6, 8.2 – ≤ 8.2.1.0 —

References