CVE-2024-45091

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
IBMUrbanCode Deploy>= 7.0, <= 7.0.5.24; >= 7.1, <= 7.1.2.10; >= 7.2, <= 7.2.3.13

References

Timeline

Published
Jan 21, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-450945.4IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privilegeCVE-2024-450966.5IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listCVE-2024-450977.1IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.CVE-2024-450988.1IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.CVE-2024-450994.8IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript coCVE-2024-45107.2A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionaliCVE-2024-451004.9IBM Security ReaQta 3.12 could allow a privileged user to cause a denial of service by sending multiple administration requests due to improCVE-2024-451016.8A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, CVE-2024-451026.8A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a coCVE-2024-451034.3A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileCVE-2024-451046.5A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device thrCVE-2024-451056.7An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that cou
CVE-2024-45091: Medium severity, CVSS 5.5 | Vulnix