Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:urbancode_deploy:7.0.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductUrbancode Deploy (0679d7fc-7b03-58d0-a43c-6833b153add1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22358 vulnerable 2026-06-08 06:29:34.651651 IBM UrbanCode Deploy session fixation
MEDIUM (6.3)
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.
Published: 2024-04-12T16:53:43.381Z
Updated: 2024-08-01T22:43:34.839Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.