IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 4.3 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www.ibm.com/support/docview.wss?uid=swg2C1000222 | psirt@us.ibm.com | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/95974 | psirt@us.ibm.com | Third Party Advisory VDB Entry |
| http://www.ibm.com/support/docview.wss?uid=swg2C1000222 | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/95974 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |