IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | UCD - IBM UrbanCode Deploy | affected |
|
||||||||||||
| IBM | UCD - IBM DevOps Deploy | affected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Versions | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ibm | Ucd Ibm Devops Deploy |
|
||||||||||||||||
| Ibm | Ucd Ibm Urbancode Deploy |
|
||||||||||||||||
| Ibm | Ucd Ibm Devops Deploy |
|
||||||||||||||||
| Ibm | Ucd Ibm Urbancode Deploy |
|
Vendor Solution
IBM strongly suggests the following: Upgrade affected versions to any of 7.2.3.24 https://www.ibm.com/support/fixcentral/swg/downloadFixes , 7.3.2.19 https://www.ibm.com/support/fixcentral/swg/downloadFixes , 8.0.1.14 https://www.ibm.com/support/fixcentral/swg/downloadFixes , 8.1.2.7 https://www.ibm.com/support/fixcentral/swg/downloadFixes , 8.2.2.0 https://www.ibm.com/support/fixcentral/swg/downloadFixes or later
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.301% probability within 30 days)
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7277574 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm ucd Ibm Devops Deploy
Ibm ucd Ibm Urbancode Deploy |
|
| Vendors & Products |
Ibm ucd Ibm Devops Deploy
Ibm ucd Ibm Urbancode Deploy |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step. | |
| Title | IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability | |
| First Time appeared |
Ibm
Ibm ucd Ibm Devops Deploy Ibm ucd Ibm Urbancode Deploy |
|
| Weaknesses | CWE-200 | |
| CPEs | cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0.1.13:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1.2.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2.3.23:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3.2.18:*:*:*:*:*:*:* cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm ucd Ibm Devops Deploy Ibm ucd Ibm Urbancode Deploy |
|
| References |
| |
| Metrics |
cvssV3_1
|