CVE-2026-10569
Full vulnerability record from the local CVENow database.
Description
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step.
Severity
MEDIUM
CVSS score
4.3
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-07-30 20:16:51.940000
Last modified
2026-10-23 22:10:00.160000
View original CVE JSON
{
"id": "CVE-2026-10569",
"sourceIdentifier": "[email protected]",
"published": "2026-07-30T20:16:51.940",
"lastModified": "2026-10-23T22:10:00.160",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an attacker with access to the logs to potentially obtain senstive values related to that step."
},
{
"lang": "es",
"value": "IBM UCD - IBM UrbanCode Deploy 7.2 hasta 7.2.3.23, y 7.3 hasta 7.3.2.18 y IBM UCD - IBM DevOps Deploy 8.0 hasta 8.0.1.13, 8.1 hasta 8.1.2.6, y 8.2 hasta 8.2.1.0 es susceptible a una vulnerabilidad de exposición de información sensible en los registros de salida del plugin. Esta exposición podría permitir a un atacante con acceso a los registros obtener potencialmente valores sensibles relacionados con ese paso."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "UCD - IBM UrbanCode Deploy",
"cpes": [
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.2.3.23:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_urbancode_deploy:7.3.2.18:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2",
"lessThanOrEqual": "7.2.3.23",
"versionType": "custom",
"status": "affected"
},
{
"version": "7.3",
"lessThanOrEqual": "7.3.2.18",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "IBM",
"product": "UCD - IBM DevOps Deploy",
"cpes": [
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.0.1.13:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.1.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ucd_ibm_devops_deploy:8.2.1.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "8.0",
"lessThanOrEqual": "8.0.1.13",
"versionType": "semver",
"status": "affected"
},
{
"version": "8.1",
"lessThanOrEqual": "8.1.2.6",
"versionType": "custom",
"status": "affected"
},
{
"version": "8.2",
"lessThanOrEqual": "8.2.1.0",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-30T19:31:16.791002Z",
"id": "CVE-2026-10569",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0.0",
"versionEndExcluding": "8.0.1.14",
"matchCriteriaId": "26D9E998-DB17-4A71-9452-A26614168759"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0.0",
"versionEndExcluding": "8.1.2.7",
"matchCriteriaId": "45A6D038-C474-4482-9F59-0152D621ADB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.2.0.0",
"versionEndExcluding": "8.2.2.0",
"matchCriteriaId": "0405E057-2493-4078-B8BC-091F51475850"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.0.0",
"versionEndExcluding": "7.2.3.24",
"matchCriteriaId": "CBD08A7E-6CEE-4FAC-8D3D-56C47378E43B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.0.0",
"versionEndExcluding": "7.3.2.19",
"matchCriteriaId": "455A02FB-5A16-4E9D-969E-054CF62C44D6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7277574",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}