Non notée
CVE-2016-0320 IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly…
Description
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UrbanCode Deploy 6.2 | 6.2 → 6.2.2 | Pas de correctif indiqué |
| UrbanCode Deploy 6.1 | 6.1 → 6.1.3.3 | Pas de correctif indiqué |
| UrbanCode Deploy 6.0 | 6.0 → 6.0.1.14 | Pas de correctif indiqué |
Autres CVE de UrbanCode Deploy
Les 7 CVE de UrbanCode Deploy →
CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting
Non notée
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including…
Non notée
CVE-2016-2942
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a…
Non notée
CVE-2016-6068
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI…
Non notée