« Volver al listado

CVE-2024-56469

Estado: AnalizadaMedia (6.3)—

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Devops DeployIBM — Urbancode Deploy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-56469",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-56469",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-27T15:09:59.879895Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:urbancode_deploy:7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:urbancode_deploy:7.1.2.22:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:urbancode_deploy:7.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:urbancode_deploy:7.2.3.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:urbancode_deploy:7.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:urbancode_deploy:7.3.2.10:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "UrbanCode Deploy",
          "versions": [
            {
              "status": "affected",
              "version": "7.1",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.2.22"
            },
            {
              "status": "affected",
              "version": "7.2",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.3.15"
            },
            {
              "status": "affected",
              "version": "7.3",
              "versionType": "semver",
              "lessThanOrEqual": "7.3.2.10"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:ibm:devops_deploy:8.0.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:devops_deploy:8.0.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:devops_deploy:8.1.0.1:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "DevOps Deploy",
          "versions": [
            {
              "status": "affected",
              "version": "8.0",
              "versionType": "semver",
              "lessThanOrEqual": "8.0.1.5"
            },
            {
              "status": "affected",
              "version": "8.1",
              "versionType": "semver",
              "lessThanOrEqual": "8.1.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-03-27T15:15:53.960",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7229031",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service."
    },
    {
      "lang": "es",
      "value": "IBM UrbanCode Deploy (UCD) 7.1 a 7.1.2.22, 7.2 a 7.2.3.15 y 7.3 a 7.3.2.10 / IBM DevOps Deploy 8.0 a 8.0.1.5 y 8.1 a 8.1.0.1 podrían permitir el acceso no autorizado a otros servicios o la posible exposición de datos confidenciales debido a la falta de autenticación en su servicio Agent Relay."
    }
  ],
  "lastModified": "2026-06-17T08:12:14.150",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D02CEF4-E668-46C3-B136-9FBB0D1F1B65",
              "versionEndExcluding": "8.0.1.5",
              "versionStartIncluding": "8.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFD6AB40-6302-4B11-809C-907ABBEDF7DA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A45F2EBB-0A41-4731-8F8B-62D9BE418D35",
              "versionEndExcluding": "7.1.2.23",
              "versionStartIncluding": "7.1.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A230C986-7C8F-427E-8190-C249E44AB782",
              "versionEndExcluding": "7.2.3.16",
              "versionStartIncluding": "7.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89A8087E-4FC6-42F1-89D6-C17095EFF772",
              "versionEndExcluding": "7.3.2.11",
              "versionStartIncluding": "7.3.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}