IBM UrbanCode Deploy and IBM DevOps Deploy Agent Relay Service Missing Authentication Vulnerability

A vulnerability exists in the Agent Relay service of IBM UrbanCode Deploy (UCD) versions 7.1 prior to 7.1.2.22, 7.2 prior to 7.2.3.15, and 7.3 prior to 7.3.2.10, as well as in IBM DevOps Deploy versions 8.0 prior to 8.0.1.5 and 8.1 prior to 8.1.0.1. This vulnerability could lead to unauthorized access to other services or the potential exposure of sensitive data, due to missing authentication in the Agent Relay service.

Impact

Exploitation of this vulnerability could result in unauthorized access to other services or the exposure of sensitive data.

Remediation

Users are advised to upgrade to version 7.1.2.23, 7.2.3.16, 7.3.2.11, 8.0.1.6 or 8.1.1.0. Instructions for downloading these versions are available on the IBM Support Fix Central website.