CVE-2025-13489
BaseFortify
Publication date: 2025-12-15
Last updated on: 2025-12-18
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | devops_deploy | From 8.1.0.0 (inc) to 8.1.2.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-319 | The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to upgrade IBM DevOps Deploy from versions 8.1 through 8.1.2.3 to version 8.1.2.4, 8.2.0.0, or later, as recommended by IBM. No other workarounds or mitigations are provided. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.
Can you explain this vulnerability to me?
This vulnerability exists in IBM DevOps Deploy versions 8.1 through 8.1.2.3, where a configuration file does not enforce redirecting HTTP traffic to HTTPS. As a result, sensitive information is transmitted in clear text over the network, which could allow an attacker to intercept this data using man-in-the-middle techniques. [1]
How can this vulnerability impact me? :
The vulnerability can lead to the exposure of sensitive information because data is transmitted in clear text. An attacker could intercept this data through man-in-the-middle attacks, compromising confidentiality. However, the vulnerability does not impact data integrity or availability. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring network traffic for unencrypted HTTP transmissions from IBM DevOps Deploy versions 8.1 through 8.1.2.3. You can use network packet capture tools like tcpdump or Wireshark to check for HTTP traffic instead of HTTPS on the relevant ports. For example, a command like 'tcpdump -i any port 80' can capture HTTP traffic. Additionally, inspecting configuration files to verify if HTTP traffic is being redirected to HTTPS can help identify the vulnerability. [1]