5.9Mittel
CVE-2024-22347IBM UrbanCode Velocity information disclosure
Beschreibung
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Schwachstellentyp (CWE):
CWE-327
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| hcltech | devops velocity | 5.0.0 | |
| IBM | DevOps Velocity | 5.0.0 | |
| IBM | UrbanCode Velocity | 4.0.0 – ≤ 4.0.25 |
Referenzen und Patches
- https://www.ibm.com/support/pages/node/7172750 Vendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:hcltech:devops_velocity:5.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:urbancode_velocity:*:*:*:*:*:*:*:*≥ 4.0.0 ≤ 4.0.15