VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 8, 2025· Updated Jun 17, 2026

CVE-2024-54176

CVE-2024-54176

Description

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14 and 7.3 through 7.3.2 could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Devops Deploy4 versions
    cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*range: >=8.0.0.0,<8.0.1.5
    • cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.0 - 8.0.1.4, 8.1 - 8.1.0.0
    • (no CPE)range: 8.0
  • IBM/Urbancode Deploy3 versions
    cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*range: >=7.0.0.0,<7.0.5.26
    • (no CPE)range: 7.0 - 7.0.5.25, 7.1 - 7.1.2.21, 7.2 - 7.2.3.14, 7.3 - 7.3.2
    • (no CPE)range: 7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.