CVE-2024-22358

MEDIUM

IBM UrbanCode Deploy <7.3.2.4 - Privilege Escalation

Title source: llm
STIX 2.1

Description

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.

References (2)

Scores

CVSS v3 6.3
EPSS 0.0007
EPSS Percentile 20.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-613
Status published
Products (2)
ibm/devops_deploy 8.0.0.0 - 8.0.1.0
ibm/urbancode_deploy 7.0.0.0 - 7.0.5.21
Published Apr 12, 2024
Tracked Since Feb 18, 2026