PT-2018-5748 · Ibm · Ibm Urbancode Deploy

Publicado 2018-01-09 · Atualizado 2019-10-03 · CVE-2017-1493

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 6.1 through 6.2

Description: The issue is related to improper access controls, allowing an authenticated user to edit objects they should not have access to.

Recommendations: For versions 6.1 and 6.2, update to a version that includes proper access controls to prevent unauthorized editing of objects. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-1493

Produtos afetados

Ibm Urbancode Deploy

Referências · 5

• http://ibm.com/support/docview.wss?uid=swg2C1000367 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1493 · Aviso do Fabricante
• http://securityfocus.com/bid/102483 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128691 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1493 · Nota de Segurança