Lucene search
+L

271 matches found

NVD
NVD
•added 2024/02/06 5:15 p.m.•42 views

CVE-2024-22331

IBM UrbanCode Deploy UCD 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy UCD - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when installing the Windows agent. IBM X-Force ID: 279971...

6.2CVSS6.1AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/06 12:00 a.m.•2 views

CVE-2024-22331: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy UCD 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy UCD - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when installing the Windows agent. IBM X-Force ID: 279971...

6.2CVSS5.8AI score0.00188EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2024/02/05 1:26 p.m.•39 views

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) may be vulnerable to sensitive information disclosure (CVE-2024-22331)

Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD could disclose sensitive user information when installing the Windows agent as a service. Vulnerability Details CVEID:CVE-2024-22331 DESCRIPTION: IBM UrbanCode Deploy UCD could disclose sensitive user information when installing the Windows...

6.2CVSS5.4AI score0.00188EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/02/05 1:26 p.m.•59 views

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) may be vulnerable to HTTP request smuggling (CVE-2023-46589)

Summary Due to the use of Apache Tomcat, IBM DevOps Deploy / IBM UrbanCode Deploy UCD is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP trailer headers. By sending a specially crafted HTTPS trailer header, an attacker could exploit this vulnerability to poison the we...

7.5CVSS7.5AI score0.02651EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/02/03 6:15 a.m.•16 views

CVE-2024-23550

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

5.5CVSS5.7AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/03 6:15 a.m.•34 views

CVE-2024-23550

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS6.2AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/03 5:32 a.m.•15 views

CVE-2024-23550 HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS6.5AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/03 5:32 a.m.•43 views

CVE-2024-23550 HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS6.4AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/03 5:32 a.m.•81 views

CVE-2024-23550

CVE-2024-23550 affects HCL DevOps Deploy / HCL Launch (UCD). The Windows agent installer could disclose sensitive user information, with confidentiality impact described as High in the CVSS data. The provided documents do not specify the underlying root cause details or a fixed version. Public so...

6.2CVSS5.3AI score0.00214EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/03 12:00 a.m.•3 views

CVE-2024-23550: Exposure of Sensitive Information to an Unauthorized Actor

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS5.8AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/03 12:00 a.m.•16 views

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch UCD that stems from the ability to...

6.2CVSS6.5AI score0.00214EPSS
SaveExploits0References2
Rows per page
Query Builder