CVE-2024-56469CWE-306

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication

Medium · published March 27, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-03-27T14:32Z
EPSS history
Timeline
  • 27 MAR 14:32Z
    IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
    cvelistv5