NetSight
high7.2

CVE-2024-55904

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 thr…

Impact

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

Affected products

VendorProductAffected versions
IbmDevops Deploy
from 8.0.0.0 before 8.0.1.5
Version 8.1.0.0
IbmUrbancode Deploy
from 7.0.0.0 before 7.0.5.26
from 7.1.0.0 before 7.1.2.22
from 7.2.0.0 before 7.2.3.15
from 7.3.0.0 before 7.3.2.10

Weakness classification

References