CVE-2024-22349

MediumCVSS 4.0

Published: 20/01/2025(UTC)Updated: 27/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.25 store web pages locally, allowing another system user to read them.

Risk Assessment

A local user can access sensitive data stored in another user's browser cache, leading to information disclosure.

Recommendation

Update IBM DevOps Velocity and IBM UrbanCode Velocity to the latest patched version.

Original NVD description (English source)

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.