CVE-2016-0373

IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-08-30

Last modified

2024-09-16

Weaknesses

CWE-285

Affected products

• Urbancode Deploy (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219
• https://exchange.xforce.ibmcloud.com/vulnerabilities/112119