Not rated
CVE-2016-8938 IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on…
Description
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.2 | No fix stated |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | No fix stated |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | No fix stated |
Other CVEs of UrbanCode Deploy
The 7 CVEs of UrbanCode Deploy →
CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Not rated
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Not rated
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Not rated
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Not rated