CVE-2016-0320

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

CVE-2016-2942

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

CVE-2016-6068

IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties...

CVE-2016-2941

The CVE-2016-2941 entry impacts IBM UrbanCode Deploy. Affected behavior is that during step execution, the product creates temporary files which may contain sensitive information, including passwords, that could be read by a local user. The documents do not provide specifics on vulnerable version...

CVE-2016-2942

CVE-2016-2942 affects IBM UrbanCode Deploy. An authenticated user with special permissions can craft a script on the server that causes processes to run on a remote UCD agent machine. The IBM advisory lists affected versions (6.0–6.2.x) and provides fixes: upgrade to 6.2.3 (for 6.2.x) or 6.1.3.4 ...

CVE-2016-8938

CVE-2016-8938 affects IBM UrbanCode Deploy (UCD). The vulnerability allows remote code execution via a crafted file upload that replaces server code, with potential execution on UCD agent machines hosting production apps. IBM’s advisory lists affected versions (e.g., 6.0.x, 6.1.x, 6.2.x lines) an...

CVE-2016-9008

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

CVE-2016-9008

IBM UrbanCode Deploy contains a vulnerability where a malicious user could access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Public details indicate a network-exposed vector with no authentication, high integrity impact, but the provided sources do not specify a f...

CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

CVE-2016-0320

CVE-2016-0320 affects IBM UrbanCode Deploy. Description: an authenticated user could modify UCD objects via multiple REST endpoints that do not properly authorize edits, potentially altering behavior of legitimately triggered processes. Affected versions include UrbanCode Deploy 6.0 through 6.2.x...

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

PT-2017-8272

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated attacker with special permissions to craft a script on the server, causing processes to run on a remote UCD agent machine. Recommendations At th...

CVE-2016-8938: Improper Access Control

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

CVE-2016-2942: Improper Access Control

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

PT-2017-7609

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of...

PT-2017-8271

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows a local user to read sensitive information, including passwords, from temporary files created during step execution. Recommendations At the moment, there is no...

CVE-2016-9008: Improper Access Control

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

CVE-2016-2941: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

PT-2017-9922

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Recommendations At the moment, there is no information abo...

PT-2017-8878

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. This could potentially lead to unauthorized...