CVEvulnerability

CVE-2024-54176

6.5 MEDIUM Published 2025-02-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-306

Description

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

Affected configurations

• ibm devops deploy (>= 8.0.0.0 < 8.0.1.5) • ibm devops deploy 8.1.0.0 • ibm urbancode deploy (>= 7.0.0.0 < 7.0.5.26) • ibm urbancode deploy (>= 7.1.0.0 < 7.1.2.22) • ibm urbancode deploy (>= 7.2.0.0 < 7.2.3.15) • ibm urbancode deploy (>= 7.3.0.0 < 7.3.2.10)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References