IBM DevOps Deploy
Moderate fix2 remedies
cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 8.1, <= 8.1.2.3
IBM UCD - Cleartext Transmission of Sensitive Information Vulnerability
Vulnerability
Patched
A vulnerability exists in IBM UrbanCode Deploy (UCD) - IBM DevOps Deploy versions 8.1 through 8.1.2.3. The issue arises because the application transmits data in clear text, potentially allowing an attacker to intercept sensitive information using man-in-the-middle techniques. This vulnerability is related to improper enforcement of HTTP traffic redirection to HTTPS.
Impact
Exploitation of this vulnerability could lead to interception of sensitive information being transmitted over the network.
Remediation
Users are advised to upgrade to version 8.1.2.4 or 8.2.0.0. Instructions for downloading these versions are available on the IBM Support Fix Central website.
Added: Dec 15, 2025, 8:23 PM
Updated: Dec 15, 2025, 8:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
2.5exploitability
5.6remediation
7.7relevance
1.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.