CVE-2016-0271: High severity ibm urbancode vulnerability
The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0271?
CVE-2016-0271 is rated as high severity due to its ability to allow local users to gain root access to arbitrary agents.
How do I fix CVE-2016-0271?
To fix CVE-2016-0271, upgrade IBM UrbanCode Deploy to versions 6.0.1.14 or later, 6.1.3.3 or later, or 6.2.1.1 or later.
What versions of IBM UrbanCode Deploy are affected by CVE-2016-0271?
CVE-2016-0271 affects IBM UrbanCode Deploy versions 6.0.x, 6.1.x, and 6.2.x prior to specific patch levels.
Can CVE-2016-0271 be exploited remotely?
CVE-2016-0271 cannot be exploited remotely as it requires local user access to exploit the vulnerability.
What components of IBM UrbanCode Deploy are impacted by CVE-2016-0271?
CVE-2016-0271 impacts the agents within IBM UrbanCode Deploy that do not verify a server's identity in JMS or HTTP sessions.