CVE-2023-40376

Summary

IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581.

Affected Software

VendorProductVersion RangeStatus
IBMUrbanCode Deploy7.1 <= 7.1.2.12affected
IBMUrbanCode Deploy7.2 <= 7.2.3.5affected
IBMUrbanCode Deploy7.3 <= 7.3.2.0affected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References