Description

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type. When deleting a custom security type, associated permissions of objects using that type may not be fully revoked. This could lead to incorrect reporting of permission configuration and unexpected privileges being retained. IBM X-Force ID: 279974.

INFO

Published Date :

2024-04-12T16:41:15.797Z

Last Modified :

2024-08-01T22:43:34.546Z

Source :

ibm
AFFECTED PRODUCTS

The following products are affected by CVE-2024-22334 vulnerability.

Vendors Products
Ibm
  • Devops Deploy
  • Urbancode Deploy
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-22334.

URL Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/279974 cve-icon cve-icon cve-icon
https://www.ibm.com/support/pages/node/7148112 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact