5.9Medium
CVE-2024-22347IBM UrbanCode Velocity information disclosure
Description
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Weakness (CWE):
CWE-327
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| hcltech | devops velocity | 5.0.0 | |
| IBM | DevOps Velocity | 5.0.0 | |
| IBM | UrbanCode Velocity | 4.0.0 – ≤ 4.0.25 |
References and patches
- https://www.ibm.com/support/pages/node/7172750 Vendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:hcltech:devops_velocity:5.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:urbancode_velocity:*:*:*:*:*:*:*:*≥ 4.0.0 ≤ 4.0.15