CVE-2016-0271

HIGH

IBM UrbanCode Deploy <6.0.1.14-6.2.1.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.

References (1)

Core 1
Core References

Scores

CVSS v3 8.2
EPSS 0.0033
EPSS Percentile 25.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (37)
ibm/urbancode_deploy 6.0
ibm/urbancode_deploy 6.0.1.0
ibm/urbancode_deploy 6.0.1.1
ibm/urbancode_deploy 6.0.1.2
ibm/urbancode_deploy 6.0.1.3
ibm/urbancode_deploy 6.0.1.4
ibm/urbancode_deploy 6.0.1.5
ibm/urbancode_deploy 6.0.1.6
ibm/urbancode_deploy 6.0.1.7
ibm/urbancode_deploy 6.0.1.8
... and 27 more
Published Jul 08, 2016
Tracked Since Feb 18, 2026