Description
IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21964623
Scores
EPSS
0.0145
EPSS Percentile
70.6%
Details
CWE
CWE-264
Status
published
Products (20)
ibm/urbancode_deploy
6.0
ibm/urbancode_deploy
6.0.1.0
ibm/urbancode_deploy
6.0.1.1
ibm/urbancode_deploy
6.0.1.2
ibm/urbancode_deploy
6.0.1.3
ibm/urbancode_deploy
6.0.1.4
ibm/urbancode_deploy
6.0.1.5
ibm/urbancode_deploy
6.0.1.6
ibm/urbancode_deploy
6.0.1.7
ibm/urbancode_deploy
6.0.1.8
... and 10 more
Published
Oct 06, 2015
Tracked Since
Feb 18, 2026