ByteOS Network

NVD Vulnerability Details :

CVE-2016-0373

Modified

Source-psirt@us.ibm.com

Published At-30 Aug, 2018 | 16:29

Updated At-09 Oct, 2019 | 23:16

IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Secondary	3.0	3.1	LOW	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N

Type: Primary

Version: 3.0

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.0

Base score: 3.1

Base severity: LOW

Vector:

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:N/A:N

CPE Matches

IBM Corporation

>>urbancode_deploy>>Versions from 6.0(inclusive) to 6.2.2.1(inclusive)

cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-285	Primary	nvd@nist.gov

CWE ID: CWE-285

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219	psirt@us.ibm.com	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/112119	psirt@us.ibm.com	VDB Entry Vendor Advisory

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219

Source: psirt@us.ibm.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/112119

Source: psirt@us.ibm.com

Resource:

VDB Entry

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History