Lucene search

[email protected]CVE-2016-0365

HistoryJul 01, 2016 - 1:59 a.m.

CVE-2016-0365

2016-07-0101:59:02

CWE-200

[email protected]

web.nvd.nist.gov

cve-2016-0365

ibm urbancode deploy

authentication bypass

remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors.

Affected configurations

NVD

Node

ibmurbancode_deployMatch6.0

ibmurbancode_deployMatch6.0.1.0

ibmurbancode_deployMatch6.0.1.1

ibmurbancode_deployMatch6.0.1.2

ibmurbancode_deployMatch6.0.1.3

ibmurbancode_deployMatch6.0.1.4

ibmurbancode_deployMatch6.0.1.5

ibmurbancode_deployMatch6.0.1.6

ibmurbancode_deployMatch6.0.1.7

ibmurbancode_deployMatch6.0.1.8

ibmurbancode_deployMatch6.0.1.9

ibmurbancode_deployMatch6.0.1.10

ibmurbancode_deployMatch6.0.1.11

ibmurbancode_deployMatch6.0.1.12

ibmurbancode_deployMatch6.1

ibmurbancode_deployMatch6.1.0.1

ibmurbancode_deployMatch6.1.0.2

ibmurbancode_deployMatch6.1.0.3

ibmurbancode_deployMatch6.1.0.4

ibmurbancode_deployMatch6.1.1.0

ibmurbancode_deployMatch6.1.1.1

ibmurbancode_deployMatch6.1.1.2

ibmurbancode_deployMatch6.1.1.3

ibmurbancode_deployMatch6.1.1.4

ibmurbancode_deployMatch6.1.1.5

ibmurbancode_deployMatch6.1.1.6

ibmurbancode_deployMatch6.1.1.7

ibmurbancode_deployMatch6.1.1.8

ibmurbancode_deployMatch6.1.2

ibmurbancode_deployMatch6.1.3

ibmurbancode_deployMatch6.1.3.1

ibmurbancode_deployMatch6.1.3.2

ibmurbancode_deployMatch6.2.0.0

ibmurbancode_deployMatch6.2.0.1

ibmurbancode_deployMatch6.2.0.2

ibmurbancode_deployMatch6.2.1

CPENameOperatorVersion
ibm:urbancode_deployibm urbancode deployeq6.0
ibm:urbancode_deployibm urbancode deployeq6.0.1.0
ibm:urbancode_deployibm urbancode deployeq6.0.1.1
ibm:urbancode_deployibm urbancode deployeq6.0.1.2
ibm:urbancode_deployibm urbancode deployeq6.0.1.3
ibm:urbancode_deployibm urbancode deployeq6.0.1.4
ibm:urbancode_deployibm urbancode deployeq6.0.1.5
ibm:urbancode_deployibm urbancode deployeq6.0.1.6
ibm:urbancode_deployibm urbancode deployeq6.0.1.7
ibm:urbancode_deployibm urbancode deployeq6.0.1.8

CPE	Name	Operator	Version
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.0
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.1
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.2
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.3
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.4
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.5
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.6
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.7
ibm:urbancode_deploy	ibm urbancode deploy	eq	6.0.1.8

Rows per page:

1-10 of 361

References

www-01.ibm.com/support/docview.wss?uid=swg2C1000149

www.securityfocus.com/bid/91526

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for CVE-2016-0365

ibm1 cvelist1 nvd1 prion1