CVE-2024-54176

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-02-08

Last modified

2025-02-22

Weaknesses

CWE-306

Affected products

• Devops Deploy (Ibm)
• Urbancode Deploy (Ibm)

References

• https://www.ibm.com/support/pages/node/7182840