Not rated
CVE-2016-2942 IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Description
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.2 | No fix stated |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | No fix stated |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | No fix stated |
Other CVEs of UrbanCode Deploy
The 7 CVEs of UrbanCode Deploy →
CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Not rated
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Not rated
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Not rated
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI…
Not rated