← Back

CVE-2026-12085

nvd nist
Published: Jun 30, 2026Modified: Jul 2, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected (4)

Ibm
2 products
Devops Deploy
Urbancode Deploy
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Devops Deploy
From 8.0.0.0 to 8.0.1.14
Devops Deploy
From 8.1.0.0 to 8.1.2.7
Devops Deploy
From 8.2.0.0 to 8.2.1.0
Urbancode Deploy
From 7.3.0.0 to 7.3.2.19

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.