CVE-2022-43877

MEDIUM 5.1CVE-2022-43877 · Published 06/05/2023 · updated 17/06/2026

In short

CVE-2022-43877 is a MEDIUM (CVSS 5.1) vulnerability affecting urbancode deploy (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.19%, higher than 8.8% of all vulnerabilities.
Fix: update to 6.2.7.20, 7.0.5.15, 7.1.2.11, 7.2.3.4 or later.

Package	Affected versions	Patched versions
urbancode deploy ibm	`≥ 6.2.0.0, < 6.2.7.20≥ 7.0.0.0, < 7.0.5.15≥ 7.1.0.0, < 7.1.2.11≥ 7.2.0.0, < 7.2.3.4≥ 7.3.0.0, < 7.3.1.0`	`6.2.7.207.0.5.157.1.2.117.2.3.47.3.1.0`

Description

IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.

References

exchange.xforce.ibmcloud.com/vulnerabilities/240148 · VDB Entry
ibm.com/support/pages/node/6967351 · Patch

More vulnerabilities in urbancode deploy

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

urbancode deploy

ibm

≥ 6.2.0.0, < 6.2.7.20≥ 7.0.0.0, < 7.0.5.15≥ 7.1.0.0, < 7.1.2.11≥ 7.2.0.0, < 7.2.3.4≥ 7.3.0.0, < 7.3.1.0

6.2.7.207.0.5.157.1.2.117.2.3.47.3.1.0

More vulnerabilities in urbancode deploy

See all →