← Back

CVE-2025-13489

nvd nist
Published: Dec 15, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected (1)

Products: Ibm: Devops Deploy
Ibm
1 product
Devops Deploy
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Devops Deploy
From 8.1.0.0 to 8.1.2.4

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.