Not rated
CVE-2016-0320 IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Description
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.2 | No fix stated |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | No fix stated |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | No fix stated |
Other CVEs of UrbanCode Deploy
The 7 CVEs of UrbanCode Deploy →
CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Not rated
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Not rated
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Not rated
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI…
Not rated