CVE-2017-1493

MEDIUM

IBM UrbanCode Deploy 6.1-6.2 - Authenticated Improper Privilege Management

Title source: llm
STIX 2.1

Description

IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.

References (3)

Core 3
Core References
VDB Entry, Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/128691
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102483
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg2C1000367

Scores

CVSS v3 5.4
EPSS 0.0070
EPSS Percentile 48.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-269
Status published
Products (40)
ibm/urbancode_deploy 6.1
ibm/urbancode_deploy 6.1.0.1
ibm/urbancode_deploy 6.1.0.3
ibm/urbancode_deploy 6.1.0.4
ibm/urbancode_deploy 6.1.1.0
ibm/urbancode_deploy 6.1.1.1
ibm/urbancode_deploy 6.1.1.2
ibm/urbancode_deploy 6.1.1.3
ibm/urbancode_deploy 6.1.1.4
ibm/urbancode_deploy 6.1.1.5
... and 30 more
Published Jan 09, 2018
Tracked Since Feb 18, 2026