PT-2018-5748 · Ibm · Ibm Urbancode Deploy

Published 2018-01-09 · Updated 2019-10-03 · CVE-2017-1493

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 6.1 through 6.2

Description: The issue is related to improper access controls, allowing an authenticated user to edit objects they should not have access to.

Recommendations: For versions 6.1 and 6.2, update to a version that includes proper access controls to prevent unauthorized editing of objects. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-1493

Affected Products

Ibm Urbancode Deploy

References · 5

• http://ibm.com/support/docview.wss?uid=swg2C1000367 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1493 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1493 · Security Note
• http://securityfocus.com/bid/102483 · Note