CVE-2024-54176
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-54176 is a vulnerability affecting IBM DevOps Deploy versions 8.0 through 8.1.0.0, 8.1.1 through 8.1.2.21, and IBM UrbanCode Deploy (UCD) versions 7.0 through 7.1.2.21, 7.1.3 through 7.1.3.14, and 7.2 through 7.3.2. An authenticated user can exploit this issue to gain unauthorized access to sensitive information of other users on the system. This vulnerability arises due to a lack of necessary authorization checks for a specific function. IBM strongly advises users to upgrade their affected software to the latest available version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.