CVE-2016-0373

CVSS 3.1 LOWEPSS 0.8%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 3.1EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 ago 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.

CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O

Productos afectados

IBM · UrbanCode Deploy

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/112119 http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219