VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 20, 2025· Updated Jan 21, 2025

IBM UrbanCode Velocity information disclosure

CVE-2024-22347

Description

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/DevOps Velocityv5
    cpe:2.3:a:ibm:devops_velocity:5.0.0:*:*:*:*:*:*:*
    Range: 5.0.0
  • IBM/UrbanCode Velocitycpe-rescue2 versions
    cpe:2.3:a:ibm:urbancode_velocity:4.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:urbancode_velocity:4.0.0:*:*:*:*:*:*:*range: 4.0.0
    • (no CPE)range: >= 4.0.0, <= 4.0.25
  • HCL Software/DevOps Velocityllm-fuzzy
    Range: = 5.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.