VULNERABILITY INTELLIGENCE
CVE-2016-0373
CVSS score3.1 LOW
EPSS probability0.79%
CISA KEVNot currently listed
Published2018-08-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.
Weakness classification
- CWE-285: Improper Authorization
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com — VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory