{"id":"CVE-2024-56469","state":"PUBLISHED","title":"IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","publishedAt":"2025-03-27T14:32:51.723Z","updatedAt":"2025-09-01T10:14:14.162Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","source":"ibm"},"assigner":"ibm","products":["IBM UrbanCode Deploy","IBM DevOps Deploy"],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","defaultStatus":"unaffected","versions":[{"version":"7.1","status":"affected","lessThanOrEqual":"7.1.2.22","versionType":"semver"},{"version":"7.2","status":"affected","lessThanOrEqual":"7.2.3.15","versionType":"semver"},{"version":"7.3","status":"affected","lessThanOrEqual":"7.3.2.10","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:urbancode_deploy:7.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.1.2.22:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.2.3.15:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.3.2.10:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"DevOps Deploy","defaultStatus":"unaffected","versions":[{"version":"8.0","status":"affected","lessThanOrEqual":"8.0.1.5","versionType":"semver"},{"version":"8.1","status":"affected","lessThanOrEqual":"8.1.0.1","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:devops_deploy:8.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.0.1.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.1.0.1:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7229031"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/56xxx/CVE-2024-56469.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-56469","state":"PUBLISHED","datePublished":"2025-03-27T14:32:51.723Z","dateUpdated":"2025-09-01T10:14:14.162Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2024-12-26T12:51:26.633Z"},"containers":{"cna":{"title":"IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication","descriptions":[{"lang":"en","value":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service."}],"affected":[{"vendor":"IBM","product":"UrbanCode Deploy","defaultStatus":"unaffected","versions":[{"version":"7.1","status":"affected","lessThanOrEqual":"7.1.2.22","versionType":"semver"},{"version":"7.2","status":"affected","lessThanOrEqual":"7.2.3.15","versionType":"semver"},{"version":"7.3","status":"affected","lessThanOrEqual":"7.3.2.10","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:urbancode_deploy:7.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.1.2.22:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.2.3.15:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:urbancode_deploy:7.3.2.10:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"DevOps Deploy","defaultStatus":"unaffected","versions":[{"version":"8.0","status":"affected","lessThanOrEqual":"8.0.1.5","versionType":"semver"},{"version":"8.1","status":"affected","lessThanOrEqual":"8.1.0.1","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:devops_deploy:8.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.0.1.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:devops_deploy:8.1.0.1:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7229031","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2025-09-01T10:14:14.162Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-27T15:09:59.879895Z","id":"CVE-2024-56469","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-27T15:10:02.778Z"}}]}}}