Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-12085

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM UCD - IBM UrbanCode Deploy

  • 7.3.0 to ≤ 7.3.2.18affected

IBM UCD - IBM DevOps Deploy

  • 8.0 to ≤ 8.0.1.13affected
  • 8.1.0 to ≤ 8.1.2.6affected
  • 8.2.0 to ≤ 8.2.1.0affected

References