Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-19022
HistoryApr 16, 2024 - 12:00 a.m.

IBM DevOps Deploy and IBM UrbanCode Deploy Access Control Error Vulnerability

2024-04-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
ibm
devops
deploy
urbancode
access control
vulnerability
misreporting
privileges
exploited

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

IBM UrbanCode Deploy (UCD) is a set of application automation deployment tools from International Business Machines (IBM). The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, such as automated deployment. An access control error vulnerability exists in IBM DevOps Deploy and IBM UrbanCode Deploy, which can be exploited by an attacker to cause misreporting of privilege configurations and retain unexpected privileges.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2024-19022