CVE-2022-43877: IBM Urbancode Deploy

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.

Affected products

• IBM Urbancode Deploy: from 6.2.0.0, before 6.2.7.20 (fixed in 6.2.7.20); from 7.0.0.0, before 7.0.5.15 (fixed in 7.0.5.15); from 7.1.0.0, before 7.1.2.11 (fixed in 7.1.2.11); from 7.2.0.0, before 7.2.3.4 (fixed in 7.2.3.4); from 7.3.0.0, before 7.3.1.0 (fixed in 7.3.1.0)

Published 2023-05-06. Last modified 2026-06-17.