CVE-2022-22315

IBM UrbanCode Deploy (UCD) CVE-2022-22315 describes an elevation-of-privilege where an authenticated user with special permissions could obtain elevated privileges due to improper handling of permissions. Affected versions include UCD 7.2.2.1, with other disclosures listing broader affected range...

Security Bulletin: UrbanCode Deploy users with create-resource permission for the standard resource type may create child resources inheriting custom types (CVE-2022-22315).

Summary Users in UrbanCode Deploy with create-resource permission for the standard resource type but not for a custom resource type, may create child resources inheriting that custom type. Vulnerability Details CVEID: CVE-2022-22315 DESCRIPTION: IBM UrbanCode Deploy UCD could allow an authenticat...