CVE-2016-0320

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2017-02-01

Last modified

2024-08-05

Weaknesses

CWE-284

Affected products

• Urbancode Deploy (Ibm)
• Urbancode Deploy (Ibm Corporation)

References

• http://www.ibm.com/support/docview.wss?uid=swg2C1000222
• http://www.securityfocus.com/bid/95974