CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

CVE-2016-0271

IBM UrbanCode Deploy hardening advisory (CVE-2016-0271) affects agents that do not verify the server identity in JMS and HTTP sessions, enabling local privilege escalation to root on affected agents. Affected versions include IBM UrbanCode Deploy 6.x prior to 6.0.1.14, 6.1.x prior to 6.1.3.3, and...

CVE-2016-0271: Undefined Security Weakness

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

PT-2016-4120

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.0 through 6.0.1.13 IBM UrbanCode Deploy versions 6.1.0 through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.0 through 6.2.1.0 Description The issue allows local users to obtain root access to arbitrary agents via...

IBM UrbanCode Deploy Elevation of Privilege Vulnerability

IBM UrbanCode Deploy is the deployment automation tool. A security vulnerability exists in the IBM UrbanCode Deploy agent's failure to validate server identifiers in JMS sessions or HTTP sessions, which can be exploited by a local attacker to gain root privileges and access arbitrary code...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0364

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

CVE-2016-0364

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

Design/Logic Flaw

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

Authentication flaw

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0364

CVE-2016-0364 affects IBM UrbanCode Deploy: versions 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not obfuscate secure-property values correctly in step output logs, enabling a remote authenticated user to obtain sensitive information via vectors involving special char...

CVE-2016-0364

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

CVE-2016-0365

IBM UrbanCode Deploy versions affected: 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1. When agent-relay Codestation artifact caching is enabled, authentication can be bypassed and sensitive artifact information can be obtained via unspecified vectors. Remediation: upgrade ...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0364: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

PT-2016-4164

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.x through 6.0.1.12 IBM UrbanCode Deploy versions 6.1.x through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.x through 6.2.1.0 Description The issue is related to the improper implementation of a logging-obfuscati...

CVE-2016-0365: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

PT-2016-4165

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.x through 6.0.1.12 IBM UrbanCode Deploy versions 6.1.x through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.x through 6.2.1.0 Description The issue allows remote attackers to bypass authentication and obtain...

CVE-2016-0267

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via 1 the server UI or 2 a database request...