IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user.
2025-03-27T15:15:54.707
2025-08-14T19:13:16.593
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | devops_deploy | < 8.0.1.5 | Yes |
| Application | ibm | devops_deploy | 8.1.0.0 | Yes |
| Application | ibm | urbancode_deploy | < 7.1.2.22 | Yes |
| Application | ibm | urbancode_deploy | < 7.2.3.15 | Yes |
| Application | ibm | urbancode_deploy | < 7.3.2.10 | Yes |