CVE-2023-40376: IBM UrbanCode Deploy (UCD) improper authentication controls
First published: Fri Sep 22 2023(Updated: )
IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM UrbanCode Deploy | >=7.1<=7.1.2.12 | |
| IBM UrbanCode Deploy | >=7.2<=7.2.3.5 | |
| IBM UrbanCode Deploy | >=7.3<=7.3.2.0 | |
| IBM UCD - IBM UrbanCode Deploy | <=7.1 - 7.1.2.12 | |
| IBM UCD - IBM UrbanCode Deploy | <=7.2 - 7.2.3.5 | |
| IBM UCD - IBM UrbanCode Deploy | <=7.3 - 7.3.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM UrbanCode Deploy vulnerability?
The vulnerability ID for this IBM UrbanCode Deploy vulnerability is CVE-2023-40376.
What is the severity of CVE-2023-40376?
The severity of CVE-2023-40376 is medium, with a severity value of 6.5.
How does this vulnerability affect IBM UrbanCode Deploy?
This vulnerability affects IBM UrbanCode Deploy versions 7.1 - 7.1.2.12, 7.2 - 7.2.3.5, and 7.3 - 7.3.2.0 under certain configurations.
What is the risk of this vulnerability?
This vulnerability allows an authenticated user to make changes to environment variables due to improper authentication controls.
Is there a fix available for this vulnerability?
Yes, there is a fix available for this vulnerability. Please refer to the IBM support pages for more information.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/title
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/ibm
- canonical/ibm urbancode deploy
- version/ibm urbancode deploy/7.1
- version/ibm urbancode deploy/7.1.2.12
- version/ibm urbancode deploy/7.2
- version/ibm urbancode deploy/7.2.3.5
- version/ibm urbancode deploy/7.3
- version/ibm urbancode deploy/7.3.2.0
- canonical/ibm ucd - ibm urbancode deploy
- version/ibm ucd - ibm urbancode deploy/7.1 - 7.1.2.12
- version/ibm ucd - ibm urbancode deploy/7.2 - 7.2.3.5
- version/ibm ucd - ibm urbancode deploy/7.3 - 7.3.2.0