IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/280896 | VDB Entry |
| https://www.ibm.com/support/pages/node/7148109 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/280896 | VDB Entry |
| https://www.ibm.com/support/pages/node/7148109 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Jan 2025, 21:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:* |
|
| First Time |
Ibm devops Deploy
Ibm Ibm urbancode Deploy |
|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/280896 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7148109 - Vendor Advisory |
21 Nov 2024, 08:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/280896 - | |
| References | () https://www.ibm.com/support/pages/node/7148109 - |
15 Apr 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
12 Apr 2024, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-12 17:17
Updated : 2025-01-29 21:29
NVD link : CVE-2024-22358
Mitre link : CVE-2024-22358
CVE.ORG link : CVE-2024-22358
JSON object : View
Products Affected
ibm
- urbancode_deploy
- devops_deploy
CWE
CWE-613
Insufficient Session Expiration