Description
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | UrbanCode Deploy | unaffected |
|
|||||||||||||||
| IBM | DevOps Deploy | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-19919 | IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896. |
References
History
Wed, 29 Jan 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm
Ibm devops Deploy Ibm urbancode Deploy |
|
| CPEs | cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm devops Deploy Ibm urbancode Deploy |
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2024-08-01T22:43:34.839Z
Reserved: 2024-01-08T23:42:36.758Z
Link: CVE-2024-22358
Vulnrichment
Updated: 2024-08-01T22:43:34.839Z
NVD
Status : Analyzed
Published: 2024-04-12T17:17:22.023
Modified: 2025-01-29T21:29:36.273
Link: CVE-2024-22358
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses