Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-1998

IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM UrbanCode Deploy

Default version status: unaffected

  • 7.1 to ≤ 7.1.2.21affected
  • 7.2 to ≤ 7.2.3.14affected
  • 7.3 to ≤ 7.3.2.9affected

IBM DevOps Deploy

Default version status: unaffected

  • 8.0 to ≤ 8.0.1.4affected
  • 8.1affected

References