Vulnerability in IBM Urbancode Deploy
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Ibm Urbancode_deploy — versions 6.0, 6.0.1, 6.0.1.1
- Ibm Corporation Urbancode Deploy — versions 6.0.1.10, 6.0.1.3, 6.1.1.7
Weakness classification (CWE)
References
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-0320?
- CVE-2016-0320 is a medium-severity vulnerability in IBM Urbancode Deploy, classified under Improper Access Control. CVSS score: 4.3/10. Published 2017-02-01.
- How severe is CVE-2016-0320?
- Medium severity. CVSS v3 base score is 4.3 out of 10.