CVE-2016-2942

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

CVE-2016-2942

CVE-2016-2942 affects IBM UrbanCode Deploy. An authenticated user with special permissions can craft a script on the server that causes processes to run on a remote UCD agent machine. The IBM advisory lists affected versions (6.0–6.2.x) and provides fixes: upgrade to 6.2.3 (for 6.2.x) or 6.1.3.4 ...

IBM UrbanCode Deploy Security Bypass Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2017-00171)

IBM UrbanCode Deploy is a set of application automation deployment tools from IBM in the United States. IBM UrbanCode Deploy has an information disclosure vulnerability. Allowing an attacker could exploit the vulnerability to access sensitive information...

IBM UrbanCode Deploy Remote Code Execution Vulnerability

IBM UrbanCode Deploy is a set of application automation deployment tools from IBM in the United States. A remote code execution vulnerability exists in IBM UrbanCode Deploy. Allows an attacker to exploit the vulnerability to execute arbitrary code in the context of the affected application...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

CVE-2016-2994 describes a Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x prior to 6.2.1.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The root cause is related to vulnerable input handling in the 6.2.x line, ...

IBM UrbanCode Deploy Cross-Site Scripting Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

CVE-2016-0271

IBM UrbanCode Deploy hardening advisory (CVE-2016-0271) affects agents that do not verify the server identity in JMS and HTTP sessions, enabling local privilege escalation to root on affected agents. Affected versions include IBM UrbanCode Deploy 6.x prior to 6.0.1.14, 6.1.x prior to 6.1.3.3, and...

IBM UrbanCode Deploy Elevation of Privilege Vulnerability

IBM UrbanCode Deploy is the deployment automation tool. A security vulnerability exists in the IBM UrbanCode Deploy agent's failure to validate server identifiers in JMS sessions or HTTP sessions, which can be exploited by a local attacker to gain root privileges and access arbitrary code...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...