Skip to content
Sign in
5.3 Medium

CVE-2020-4482 IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security

Description

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.

Affected products and versions

Product Affected versions Fixed in
UrbanCode Deploy 7.0 7.0.3.0 → 7.0.4.0 No fix stated
UrbanCode Deploy 6.2 6.2.7.3 → 6.2.7.4 No fix stated

Other CVEs of UrbanCode Deploy

The 45 CVEs of UrbanCode Deploy →
CVE-2025-36162 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain… 4.3 Medium CVE-2025-1998 IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0… 5.5 Medium CVE-2025-1997 IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 /… 5.4 Medium CVE-2024-56469 IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy… 6.3 Medium
Track this CVE