{"id":"CVE-2024-54176","state":"PUBLISHED","title":"IBM UrbanCode Deploy missing authentication","description":"IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.","publishedAt":"2025-02-08T16:15:40.041Z","updatedAt":"2025-02-22T22:12:32.094Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM UrbanCode Deploy","IBM DevOps Deploy"],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected","lessThanOrEqual":"7.0.5.25","versionType":"semver"},{"version":"7.1","status":"affected","lessThanOrEqual":"7.1.2.21","versionType":"semver"},{"version":"7.2","status":"affected","lessThanOrEqual":"7.2.3.14","versionType":"semver"},{"version":"7.3","status":"affected","lessThanOrEqual":"7.3.2.9","versionType":"semver"}]},{"vendor":"IBM","product":"DevOps Deploy","defaultStatus":"unaffected","versions":[{"version":"8.0","status":"affected","lessThanOrEqual":"8.0.1.4","versionType":"semver"},{"version":"8.1","status":"affected","lessThanOrEqual":"8.1.0.0","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/7182840"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/54xxx/CVE-2024-54176.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-54176","state":"PUBLISHED","datePublished":"2025-02-08T16:15:40.041Z","dateUpdated":"2025-02-22T22:12:32.094Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2024-11-30T14:47:55.533Z"},"containers":{"cna":{"title":"IBM UrbanCode Deploy missing authentication","descriptions":[{"lang":"en","value":"IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function."}],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected","lessThanOrEqual":"7.0.5.25","versionType":"semver"},{"version":"7.1","status":"affected","lessThanOrEqual":"7.1.2.21","versionType":"semver"},{"version":"7.2","status":"affected","lessThanOrEqual":"7.2.3.14","versionType":"semver"},{"version":"7.3","status":"affected","lessThanOrEqual":"7.3.2.9","versionType":"semver"}]},{"vendor":"IBM","product":"DevOps Deploy","defaultStatus":"unaffected","versions":[{"version":"8.0","status":"affected","lessThanOrEqual":"8.0.1.4","versionType":"semver"},{"version":"8.1","status":"affected","lessThanOrEqual":"8.1.0.0","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7182840","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2025-02-22T22:12:32.094Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-54176","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-02-10T13:37:45.492103Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-12T20:51:42.046Z"}}]}}}