Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-55904

IBM DevOps Deploy / IBM UrbanCode Deploy command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM UrbanCode Deploy

Default version status: unaffected

  • 7.0 to ≤ 7.0.5.25affected
  • 7.1 to ≤ 7.1.2.21affected
  • 7.2 to ≤ 7.2.3.14affected
  • 7.3 to ≤ 7.3.2.9affected

IBM DevOps Deploy

Default version status: unaffected

  • 8.0 to ≤ 8.0.1.4affected
  • 8.1 to ≤ 8.1.0.0affected

References