CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

Session fixation

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

PT-2016-4120

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.0 through 6.0.1.13 IBM UrbanCode Deploy versions 6.1.0 through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.0 through 6.2.1.0 Description The issue allows local users to obtain root access to arbitrary agents via...

CVE-2016-0271: Undefined Security Weakness

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...