4.3

CVE-2016-0320

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Urbancode Deploy Version6.0
Ibm ≫ Urbancode Deploy Version6.0.1
Ibm ≫ Urbancode Deploy Version6.0.1.1
Ibm ≫ Urbancode Deploy Version6.0.1.2
Ibm ≫ Urbancode Deploy Version6.0.1.3
Ibm ≫ Urbancode Deploy Version6.0.1.4
Ibm ≫ Urbancode Deploy Version6.0.1.5
Ibm ≫ Urbancode Deploy Version6.0.1.6
Ibm ≫ Urbancode Deploy Version6.0.1.7
Ibm ≫ Urbancode Deploy Version6.0.1.8
Ibm ≫ Urbancode Deploy Version6.0.1.9
Ibm ≫ Urbancode Deploy Version6.0.1.10
Ibm ≫ Urbancode Deploy Version6.0.1.11
Ibm ≫ Urbancode Deploy Version6.0.1.12
Ibm ≫ Urbancode Deploy Version6.0.1.13
Ibm ≫ Urbancode Deploy Version6.0.1.14
Ibm ≫ Urbancode Deploy Version6.1
Ibm ≫ Urbancode Deploy Version6.1.0.1
Ibm ≫ Urbancode Deploy Version6.1.0.2
Ibm ≫ Urbancode Deploy Version6.1.0.3
Ibm ≫ Urbancode Deploy Version6.1.0.4
Ibm ≫ Urbancode Deploy Version6.1.1
Ibm ≫ Urbancode Deploy Version6.1.1.1
Ibm ≫ Urbancode Deploy Version6.1.1.2
Ibm ≫ Urbancode Deploy Version6.1.1.3
Ibm ≫ Urbancode Deploy Version6.1.1.4
Ibm ≫ Urbancode Deploy Version6.1.1.5
Ibm ≫ Urbancode Deploy Version6.1.1.6
Ibm ≫ Urbancode Deploy Version6.1.1.7
Ibm ≫ Urbancode Deploy Version6.1.1.8
Ibm ≫ Urbancode Deploy Version6.1.2
Ibm ≫ Urbancode Deploy Version6.1.3
Ibm ≫ Urbancode Deploy Version6.1.3.1
Ibm ≫ Urbancode Deploy Version6.1.3.2
Ibm ≫ Urbancode Deploy Version6.1.3.3
Ibm ≫ Urbancode Deploy Version6.2.0.0
Ibm ≫ Urbancode Deploy Version6.2.0.1
Ibm ≫ Urbancode Deploy Version6.2.0.2
Ibm ≫ Urbancode Deploy Version6.2.1
Ibm ≫ Urbancode Deploy Version6.2.1.1
Ibm ≫ Urbancode Deploy Version6.2.2
Ibm ≫ Urbancode Deploy Version6.2.2.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.285
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.securityfocus.com/bid/95974
Third Party Advisory
VDB Entry