CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

PT-2017-8272

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated attacker with special permissions to craft a script on the server, causing processes to run on a remote UCD agent machine. Recommendations At th...

CVE-2016-8938: Improper Access Control

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

CVE-2016-2942: Improper Access Control

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

PT-2017-7609

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of...

PT-2017-8271

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows a local user to read sensitive information, including passwords, from temporary files created during step execution. Recommendations At the moment, there is no...

CVE-2016-9008: Improper Access Control

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

CVE-2016-2941: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

PT-2017-9922

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Recommendations At the moment, there is no information abo...

PT-2017-8878

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. This could potentially lead to unauthorized...

CVE-2016-0320: Improper Access Control

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

CVE-2016-6068: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties...

IBM UrbanCode Deploy Security Bypass Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2017-00171)

IBM UrbanCode Deploy is a set of application automation deployment tools from IBM in the United States. IBM UrbanCode Deploy has an information disclosure vulnerability. Allowing an attacker could exploit the vulnerability to access sensitive information...

IBM UrbanCode Deploy Remote Code Execution Vulnerability

IBM UrbanCode Deploy is a set of application automation deployment tools from IBM in the United States. A remote code execution vulnerability exists in IBM UrbanCode Deploy. Allows an attacker to exploit the vulnerability to execute arbitrary code in the context of the affected application...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2994

CVE-2016-2994 describes a Cross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x prior to 6.2.1.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The root cause is related to vulnerable input handling in the 6.2.x line, ...