{"id":"CVE-2024-56469","aliases":["EUVD-2025-8499","GHSA-3jrc-j5p2-v7xj"],"status":"published","title":"IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00262,"percentile":0.18176,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2025-03-27T14:32:51Z","modified":"2026-06-17T08:12:14Z","products":[{"vendor":"hclsoftware","product":"devops deploy"},{"vendor":"ibm","product":"devops deploy"},{"vendor":"ibm","product":"devops_deploy"},{"vendor":"ibm","product":"urbancode deploy"},{"vendor":"ibm","product":"urbancode_deploy"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7229031","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56469"},{"url":"https://github.com/advisories/GHSA-3jrc-j5p2-v7xj"}],"sources":{"cve":[{"id":"CVE-2024-56469","title":"IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","status":"published","published":"2025-03-27T14:32:51.723Z","modified":"2025-09-01T10:14:14.162Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2025-8499","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","status":"published","published":"2025-03-27T14:32:51Z","modified":"2025-09-01T10:14:14Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:49.168932Z"}],"ghsa":[{"id":"GHSA-3jrc-j5p2-v7xj","title":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 /...","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","status":"published","published":"2025-03-27T15:31:10Z","modified":"2025-03-27T15:31:20Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:00:29.248113Z"}],"nvd":[{"id":"CVE-2024-56469","description":"IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.","status":"published","published":"2025-03-27T15:15:53.96Z","modified":"2026-06-17T08:12:14.15Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:10:45.815983Z"}]}}