10

CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Urbancode Deploy Version 6.0
Ibm ≫ Urbancode Deploy Version 6.0.1
Ibm ≫ Urbancode Deploy Version 6.0.1.1
Ibm ≫ Urbancode Deploy Version 6.0.1.2
Ibm ≫ Urbancode Deploy Version 6.0.1.3
Ibm ≫ Urbancode Deploy Version 6.0.1.4
Ibm ≫ Urbancode Deploy Version 6.0.1.5
Ibm ≫ Urbancode Deploy Version 6.0.1.6
Ibm ≫ Urbancode Deploy Version 6.0.1.7
Ibm ≫ Urbancode Deploy Version 6.0.1.8
Ibm ≫ Urbancode Deploy Version 6.0.1.9
Ibm ≫ Urbancode Deploy Version 6.0.1.10
Ibm ≫ Urbancode Deploy Version 6.0.1.11
Ibm ≫ Urbancode Deploy Version 6.0.1.12
Ibm ≫ Urbancode Deploy Version 6.0.1.13
Ibm ≫ Urbancode Deploy Version 6.0.1.14
Ibm ≫ Urbancode Deploy Version 6.1
Ibm ≫ Urbancode Deploy Version 6.1.0.1
Ibm ≫ Urbancode Deploy Version 6.1.0.2
Ibm ≫ Urbancode Deploy Version 6.1.0.3
Ibm ≫ Urbancode Deploy Version 6.1.0.4
Ibm ≫ Urbancode Deploy Version 6.1.1
Ibm ≫ Urbancode Deploy Version 6.1.1.1
Ibm ≫ Urbancode Deploy Version 6.1.1.2
Ibm ≫ Urbancode Deploy Version 6.1.1.3
Ibm ≫ Urbancode Deploy Version 6.1.1.4
Ibm ≫ Urbancode Deploy Version 6.1.1.5
Ibm ≫ Urbancode Deploy Version 6.1.1.6
Ibm ≫ Urbancode Deploy Version 6.1.1.7
Ibm ≫ Urbancode Deploy Version 6.1.1.8
Ibm ≫ Urbancode Deploy Version 6.1.2
Ibm ≫ Urbancode Deploy Version 6.1.3
Ibm ≫ Urbancode Deploy Version 6.1.3.1
Ibm ≫ Urbancode Deploy Version 6.1.3.2
Ibm ≫ Urbancode Deploy Version 6.1.3.3
Ibm ≫ Urbancode Deploy Version 6.2.0.0
Ibm ≫ Urbancode Deploy Version 6.2.0.1
Ibm ≫ Urbancode Deploy Version 6.2.0.2
Ibm ≫ Urbancode Deploy Version 6.2.1
Ibm ≫ Urbancode Deploy Version 6.2.1.1
Ibm ≫ Urbancode Deploy Version 6.2.2
Ibm ≫ Urbancode Deploy Version 6.2.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.82% 0.848
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 3.9 6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.ibm.com/support/docview.wss?uid=swg2C1000237
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95289
Third Party Advisory
VDB Entry