CVE-2016-8938

Summary

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationUrbanCode Deploy6.1.0.2affected
IBM CorporationUrbanCode Deploy6.0affected
IBM CorporationUrbanCode Deploy6.0.1affected
IBM CorporationUrbanCode Deploy6.0.1.1affected
IBM CorporationUrbanCode Deploy6.0.1.2affected
IBM CorporationUrbanCode Deploy6.0.1.3affected
IBM CorporationUrbanCode Deploy6.0.1.4affected
IBM CorporationUrbanCode Deploy6.0.1.5affected
IBM CorporationUrbanCode Deploy6.0.1.6affected
IBM CorporationUrbanCode Deploy6.1affected
IBM CorporationUrbanCode Deploy6.1.0.1affected
IBM CorporationUrbanCode Deploy6.1.0.3affected
IBM CorporationUrbanCode Deploy6.0.1.7affected
IBM CorporationUrbanCode Deploy6.0.1.8affected
IBM CorporationUrbanCode Deploy6.1.0.4affected
IBM CorporationUrbanCode Deploy6.1.1affected
IBM CorporationUrbanCode Deploy6.1.1.1affected
IBM CorporationUrbanCode Deploy6.1.1.2affected
IBM CorporationUrbanCode Deploy6.1.1.3affected
IBM CorporationUrbanCode Deploy6.1.1.4affected
IBM CorporationUrbanCode Deploy6.1.1.5affected
IBM CorporationUrbanCode Deploy6.0.1.9affected
IBM CorporationUrbanCode Deploy6.1.1.6affected
IBM CorporationUrbanCode Deploy6.1.1.7affected
IBM CorporationUrbanCode Deploy6.1.2affected
IBM CorporationUrbanCode Deploy6.0.1.10affected
IBM CorporationUrbanCode Deploy6.0.1.11affected
IBM CorporationUrbanCode Deploy6.1.1.8affected
IBM CorporationUrbanCode Deploy6.1.3affected
IBM CorporationUrbanCode Deploy6.1.3.1affected
IBM CorporationUrbanCode Deploy6.2affected
IBM CorporationUrbanCode Deploy6.2.0.1affected
IBM CorporationUrbanCode Deploy6.0.1.12affected
IBM CorporationUrbanCode Deploy6.1.3.2affected
IBM CorporationUrbanCode Deploy6.2.0.2affected
IBM CorporationUrbanCode Deploy6.2.1affected
IBM CorporationUrbanCode Deploy6.0.1.13affected
IBM CorporationUrbanCode Deploy6.2.1.1affected
IBM CorporationUrbanCode Deploy6.0.1.14affected
IBM CorporationUrbanCode Deploy6.1.3.3affected
IBM CorporationUrbanCode Deploy6.2.1.2affected
IBM CorporationUrbanCode Deploy6.2.2affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References