CVE-2026-10569
MEDIUMIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability
Title source: cnaDescription
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
patch
https://www.ibm.com/support/pages/node/7277574
Scores
CVSS v3
4.3
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-200
Status
published
Products (5)
IBM/UCD - IBM DevOps Deploy
8.0 - 8.0.1.13
IBM/UCD - IBM DevOps Deploy
8.1 - 8.1.2.6
IBM/UCD - IBM DevOps Deploy
8.2 - 8.2.1.0
IBM/UCD - IBM UrbanCode Deploy
7.2 - 7.2.3.23
IBM/UCD - IBM UrbanCode Deploy
7.3 - 7.3.2.18
Published
Jul 30, 2026
Tracked Since
Jul 31, 2026