PT-2026-95106

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

CVE-2026-78658 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an formation disclosure vulnerability when processing...

Security Bulletin: CVE-2020-4483 Secure property value can be seen in diagnostics bundle and ds_request_audit_entry

Summary Secure property value can be seen in diagnostics bundle and dsrequestauditentry Vulnerability Details CVEID: CVE-2020-4483 DESCRIPTION: IBM UrbanCode Deploy UCD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser...

Security Bulletin: Secure properties can be shown in plain text in IBM UrbanCode Deploy (CVE-2016-9007)

Summary IBM UrbanCode Deploy could disclose secure property values leaked in process execution log output properties that could be accessable to unauthorized users. Vulnerability Details CVEID: CVE-2016-9007 DESCRIPTION: IBM UrbanCode Deploy could disclose secure property values leaked in process...

CVE-2016-0267

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via 1 the server UI or 2 a database request...

PT-2016-4118

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.x through 6.0.1.12 IBM UrbanCode Deploy versions 6.1.x through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.x through 6.2.1.0 Description The issue allows remote authenticated users to obtain sensitive cleartext...

HTTP Cookie 'secure' Property Transport Mismatch

The remote web server sends out cookies to clients with a 'secure' property that does not match the transport, HTTP or HTTPS, over which they were received. This may occur in two forms : 1. The cookie is sent over HTTP, but has the 'secure' property set, indicating that it should only be sent ove...