Lucene search

[email protected]CVE-2016-0271

HistoryJul 08, 2016 - 1:59 a.m.

CVE-2016-0271

2016-07-0801:59:02

CWE-264

[email protected]

web.nvd.nist.gov

ibm urbancode deploy

cve-2016-0271

unverified server identity

root access

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server’s identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.

Affected configurations

NVD

Node

ibmurbancode_deployMatch6.0

ibmurbancode_deployMatch6.0.1.0

ibmurbancode_deployMatch6.0.1.1

ibmurbancode_deployMatch6.0.1.2

ibmurbancode_deployMatch6.0.1.3

ibmurbancode_deployMatch6.0.1.4

ibmurbancode_deployMatch6.0.1.5

ibmurbancode_deployMatch6.0.1.6

ibmurbancode_deployMatch6.0.1.7

ibmurbancode_deployMatch6.0.1.8

ibmurbancode_deployMatch6.0.1.9

ibmurbancode_deployMatch6.0.1.10

ibmurbancode_deployMatch6.0.1.11

ibmurbancode_deployMatch6.0.1.12

ibmurbancode_deployMatch6.0.1.13

ibmurbancode_deployMatch6.1

ibmurbancode_deployMatch6.1.0.1

ibmurbancode_deployMatch6.1.0.2

ibmurbancode_deployMatch6.1.0.3

ibmurbancode_deployMatch6.1.0.4

ibmurbancode_deployMatch6.1.1.0

ibmurbancode_deployMatch6.1.1.1

ibmurbancode_deployMatch6.1.1.2

ibmurbancode_deployMatch6.1.1.3

ibmurbancode_deployMatch6.1.1.4

ibmurbancode_deployMatch6.1.1.5

ibmurbancode_deployMatch6.1.1.6

ibmurbancode_deployMatch6.1.1.7

ibmurbancode_deployMatch6.1.1.8

ibmurbancode_deployMatch6.1.2

ibmurbancode_deployMatch6.1.3

ibmurbancode_deployMatch6.1.3.1

ibmurbancode_deployMatch6.1.3.2

ibmurbancode_deployMatch6.2.0.0

ibmurbancode_deployMatch6.2.0.1

ibmurbancode_deployMatch6.2.0.2

ibmurbancode_deployMatch6.2.1

CPENameOperatorVersion
ibm:urbancode_deployibm urbancode deployeq6.0
ibm:urbancode_deployibm urbancode deployeq6.0.1.0
ibm:urbancode_deployibm urbancode deployeq6.0.1.1
ibm:urbancode_deployibm urbancode deployeq6.0.1.2
ibm:urbancode_deployibm urbancode deployeq6.0.1.3
ibm:urbancode_deployibm urbancode deployeq6.0.1.4
ibm:urbancode_deployibm urbancode deployeq6.0.1.5
ibm:urbancode_deployibm urbancode deployeq6.0.1.6
ibm:urbancode_deployibm urbancode deployeq6.0.1.7
ibm:urbancode_deployibm urbancode deployeq6.0.1.8

CPE	Name	Operator	Version
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.0
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.1
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.2
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.3
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.4
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.5
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.6
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.7
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.8

Rows per page:

1-10 of 371

References

www-01.ibm.com/support/docview.wss?uid=swg2C1000150

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2016-0271

ibm1 nvd1 prion1 cvelist1