CVE-2025-14148

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-12-15

Last modified

2026-10-07

Weaknesses

CWE-522

Affected products

• Devops Deploy (Ibm)
• Ucd Ibm Devops Deploy (Ibm)

References

• https://www.ibm.com/support/pages/node/7254663