IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7277574 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · ibmNVD modified 2026-10-23 22:10
Affected (CPE criteria) 2
cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7277574 Vendor Advisory