VULNERABILITY INTELLIGENCE
CVE-2016-0320
CVSS score4.3 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2017-02-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry