CVE-2016-0320

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-01 · updated 2026-06-17
Weakness: CWE-284

Description

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.

Affected products

IBM UrbanCode Deploy: 6.0, 6.0.1, 6.0.1.1, 6.0.1.2, 6.0.1.3, 6.0.1.4 (+36)

References

http://www.ibm.com/support/docview.wss?uid=swg2C1000222
http://www.securityfocus.com/bid/95974
http://www.ibm.com/support/docview.wss?uid=swg2C1000222
http://www.securityfocus.com/bid/95974

Get alerted when CVE-2016-0320 or the next vulnerability affects your stack