Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-19022
HistoryApr 16, 2024 - 12:00 a.m.

IBM DevOps Deploy and IBM UrbanCode Deploy Access Control Error Vulnerability

2024-04-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
ibm
devops
deploy
urbancode
access control
vulnerability
misreporting
privileges
exploited

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

IBM UrbanCode Deploy (UCD) is a set of application automation deployment tools from International Business Machines (IBM). The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, such as automated deployment. An access control error vulnerability exists in IBM DevOps Deploy and IBM UrbanCode Deploy, which can be exploited by an attacker to cause misreporting of privilege configurations and retain unexpected privileges.

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

Related for CNVD-2024-19022