CVEvulnerability

CVE-2024-56469

6.3 MEDIUM Published 2025-03-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-306

Description

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

Affected configurations

• ibm devops deploy (>= 8.0.0.0 < 8.0.1.5) • ibm devops deploy 8.1.0.0 • ibm urbancode deploy (>= 7.1.0.0 < 7.1.2.23) • ibm urbancode deploy (>= 7.2.0.0 < 7.2.3.16) • ibm urbancode deploy (>= 7.3.0.0 < 7.3.2.11)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References