Sensitive Information Exposure in IBM UrbanCode Deploy and IBM DevOps Deploy
CVE-2026-10569

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Ucd - IBM Urbancode Deploy
Ucd - IBM Devops Deploy
Vendor
CVE Published:
30 July 2026

What is CVE-2026-10569?

IBM UrbanCode Deploy and IBM DevOps Deploy products are vulnerable to an exposure of sensitive information due to inadequate handling of sensitive data in plugin output logs. This issue may allow unauthorized access to sensitive values related to deployment steps, which could be leveraged by attackers who gain access to the logs. Organizations utilizing affected versions should prioritize applying the necessary patches to mitigate this risk.

Affected Version(s)

UCD - IBM DevOps Deploy 8.0 <= 8.0.1.13

UCD - IBM DevOps Deploy 8.1 <= 8.1.2.6

UCD - IBM DevOps Deploy 8.2 <= 8.2.1.0

References

https://www.ibm.com/support/pages/node/7277574
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.