CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.

Score

CVSS 3.0 10.0 Critical

Status

Modified - psirt@us.ibm.com

Published

2017-02-01

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Urbancode Deploy (Ibm)
• Urbancode Deploy (Ibm Corporation)

References

• http://www.ibm.com/support/docview.wss?uid=swg2C1000237
• http://www.securityfocus.com/bid/95289