NetSight
medium5.5

CVE-2025-1998

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores p…

Impact

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user.

Affected products

VendorProductAffected versions
IbmDevops Deploy
from 8.0.0.0 before 8.0.1.5
Version 8.1.0.0
IbmUrbancode Deploy
from 7.1.0.0 before 7.1.2.22
from 7.2.0.0 before 7.2.3.15
from 7.3.0.0 before 7.3.2.10

Weakness classification

References