CVE-2016-2941: Infoleak
Published Feb 1, 2017
·Updated
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user.
Affected Software
42 affected components
IBM UrbanCode Deploy=6.0
IBM UrbanCode Deploy=6.0.1
IBM UrbanCode Deploy=6.0.1.1
IBM UrbanCode Deploy=6.0.1.2
IBM UrbanCode Deploy=6.0.1.3
IBM UrbanCode Deploy=6.0.1.4
IBM UrbanCode Deploy=6.0.1.5
IBM UrbanCode Deploy=6.0.1.6
IBM UrbanCode Deploy=6.0.1.7
IBM UrbanCode Deploy=6.0.1.8
IBM UrbanCode Deploy=6.0.1.9
IBM UrbanCode Deploy=6.0.1.10
IBM UrbanCode Deploy=6.0.1.11
IBM UrbanCode Deploy=6.0.1.12
IBM UrbanCode Deploy=6.0.1.13
IBM UrbanCode Deploy=6.0.1.14
IBM UrbanCode Deploy=6.1
IBM UrbanCode Deploy=6.1.0.1
IBM UrbanCode Deploy=6.1.0.2
IBM UrbanCode Deploy=6.1.0.3
IBM UrbanCode Deploy=6.1.0.4
IBM UrbanCode Deploy=6.1.1
IBM UrbanCode Deploy=6.1.1.1
IBM UrbanCode Deploy=6.1.1.2
IBM UrbanCode Deploy=6.1.1.3
IBM UrbanCode Deploy=6.1.1.4
IBM UrbanCode Deploy=6.1.1.5
IBM UrbanCode Deploy=6.1.1.6
IBM UrbanCode Deploy=6.1.1.7
IBM UrbanCode Deploy=6.1.1.8
IBM UrbanCode Deploy=6.1.2
IBM UrbanCode Deploy=6.1.3
IBM UrbanCode Deploy=6.1.3.1
IBM UrbanCode Deploy=6.1.3.2
IBM UrbanCode Deploy=6.1.3.3
IBM UrbanCode Deploy=6.2.0.0
IBM UrbanCode Deploy=6.2.0.1
IBM UrbanCode Deploy=6.2.0.2
IBM UrbanCode Deploy=6.2.1
IBM UrbanCode Deploy=6.2.1.1
IBM UrbanCode Deploy=6.2.2
IBM UrbanCode Deploy=6.2.2.1
Event History
Feb 1, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-2941?
The severity of CVE-2016-2941 is classified as medium due to the potential exposure of sensitive information.
2
How do I fix CVE-2016-2941?
To fix CVE-2016-2941, update IBM UrbanCode Deploy to the latest version that addresses this vulnerability.
3
What versions are affected by CVE-2016-2941?
CVE-2016-2941 affects IBM UrbanCode Deploy versions 6.0, 6.0.1 through 6.0.1.14, and 6.1 up to 6.2.2.1.
4
What kind of sensitive information is exposed in CVE-2016-2941?
CVE-2016-2941 can expose temporary files containing sensitive data, including passwords.
5
Who is vulnerable to CVE-2016-2941?
Local users with access to the IBM UrbanCode Deploy environment are vulnerable to CVE-2016-2941.