NetSight
medium5.9

CVE-2024-22347

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.

Impact

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected products

VendorProductAffected versions
HcltechDevops Velocity
Version 5.0.0
IbmUrbancode Velocity
from 4.0.0 through 4.0.15

Weakness classification

References