What’s Vulnerable › Vulnerabilities
CVE-2024-56469: IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication
- Severity: medium (CVSS 6.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-27 · updated 2026-06-17
- Weakness: CWE-306
Description
IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Affected products
- IBM DevOps Deploy: from 8.0.0.0 before 8.0.1.5; 8.1.0.0 — fixed in 8.0.1.5
- IBM UrbanCode Deploy: from 7.1.0.0 before 7.1.2.23; from 7.2.0.0 before 7.2.3.16; from 7.3.0.0 before 7.3.2.11 — fixed in 7.1.2.23, 7.2.3.16, 7.3.2.11
How to fix
Upgrade to a fixed version: IBM DevOps Deploy 8.0.1.5; IBM UrbanCode Deploy 7.1.2.23, 7.2.3.16, 7.3.2.11. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-56469 or the next vulnerability affects your stack