Lucene search
K

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy (UCD) applications, related to lack of access control, allows a perpetrator to execute arbitrary code.

🗓️ 07 Dec 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

Access control failure in UrbanCode Deploy enables code execution on UCD agents via crafted download.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Remote code execution possible due to insecure REST endpoint (CVE-2016-8938)
17 Jun 201822:33
ibm
CNVD
IBM UrbanCode Deploy Remote Code Execution Vulnerability
6 Jan 201700:00
cnvd
CVE
CVE-2016-8938
1 Feb 201722:00
cve
Cvelist
CVE-2016-8938
1 Feb 201722:00
cvelist
EUVD
EUVD-2016-9763
7 Oct 202500:30
euvd
NVD
CVE-2016-8938
1 Feb 201722:59
nvd
OpenVAS
IBM UrbanCode Deploy Multiple Vulnerabilities
3 Feb 201700:00
openvas
Prion
Design/Logic Flaw
1 Feb 201722:59
prion
Vulners
Node
OROROR
ibmurbancode_deployMatch6.0.1.10
OR
ibmurbancode_deployMatch6.0.1.11
OR
ibmurbancode_deployMatch6.0.1.12
OR
ibmurbancode_deployMatch6.0.1.13
OR
ibmurbancode_deployMatch6.0.1.14
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Mar 2021 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 210
CVSS 310
EPSS0.00768
1