What is CVE-2024-22334?

CVE-2024-22334 is a medium-severity vulnerability in Ibm Devops Deploy, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 4.4/10. Published 2024-04-12.

How severe is CVE-2024-22334?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Ibm Devops Deploy

CVE-2024-22334

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 could be vulnerable to incomplete revocation of permissions when deleting a custom s…

EPSS: 0.004 (34.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Ibm Devops Deploy — versions 8.0
Ibm Devops_deploy
Ibm Urbancode Deploy — versions 7.0, 7.1, 7.2
Ibm Urbancode_deploy

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

psirt@us.ibm.com (vendor-advisory, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry)

Frequently asked questions

What is CVE-2024-22334?: CVE-2024-22334 is a medium-severity vulnerability in Ibm Devops Deploy, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 4.4/10. Published 2024-04-12.
How severe is CVE-2024-22334?: Medium severity. CVSS v3 base score is 4.4 out of 10.