CVE-2022-43877

IBM UrbanCode Deploy (UCD) information disclosure

MEDIUM

5.1

CVSS Score

Published: May 6, 2023 at 02:44 AM UTC

Updated: June 17, 2026 at 05:07 AM UTC

1 product affected across 1 vendorUrbanCode Deploy

Using UrbanCode Deploy by IBM?

Get instant alerts when new vulnerabilities affect UrbanCode Deploy - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

UrbanCode Deploy · IBM

95%

6.2 ≤ v ≤ 6.2.7.196.2.0.0 ≤ v < 6.2.7.207.0 ≤ v ≤ 7.0.5.147.0.0.0 ≤ v < 7.0.5.157.1 ≤ v ≤ 7.1.2.107.1.0.0 ≤ v < 7.1.2.117.2 ≤ v ≤ 7.2.3.37.2.0.0 ≤ v < 7.2.3.47.3 ≤ v ≤ 7.3.0.17.3.0.0 ≤ v < 7.3.1.06.2 7.0 7.1 7.2 7.3

Affected range stops below 6.2.7.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0.5.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.1.2.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.2.3.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3.1.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

VDB EntryVendor Advisory

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/240148

Vendor AdvisoryPatch

Source: [email protected]

https://www.ibm.com/support/pages/node/6967351

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.1MEDIUMibm

Attack Vector: LOCAL
Complexity: HIGH
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-922

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card