CVE-2026-10569CWE-200information-disclosure

CVE-2026-10569

Medium · published July 31, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-07-31T00:16Z
Affected products (5)
ProductVersionsFixed in
ibm/devops_deploy≥ 8.0.0.0, < 8.0.1.148.0.1.14
ibm/devops_deploy≥ 8.1.0.0, < 8.1.2.78.1.2.7
ibm/devops_deploy≥ 8.2.0.0, < 8.2.2.08.2.2.0
ibm/urbancode_deploy≥ 7.2.0.0, < 7.2.3.247.2.3.24
ibm/urbancode_deploy≥ 7.3.0.0, < 7.3.2.197.3.2.19
References (1)
https://www.ibm.com/support/pages/node/7277574 · [email protected]
EPSS history
Timeline
  • 30 JUL 19:06Z
    IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability
    cvelistv5