← CVE Intelligence

CVE-2026-12085

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability PUBLISHED

Description (CNA)

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected (CNA)

Vendor / productVersions
IBM / UCD - IBM UrbanCode Deployaffected 7.3.0 through 7.3.2.18
IBM / UCD - IBM DevOps Deployaffected 8.0 through 8.0.1.13; affected 8.1.0 through 8.1.2.6; affected 8.2.0 through 8.2.1.0

CWE

CWE-201

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.