CVE-2016-2942: High severity IBM UrbanCode Deploy vulnerability
Published Feb 1, 2017
·Updated
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine.
Affected Software
42 affected components
IBM UrbanCode Deploy=6.0
IBM UrbanCode Deploy=6.0.1
IBM UrbanCode Deploy=6.0.1.1
IBM UrbanCode Deploy=6.0.1.2
IBM UrbanCode Deploy=6.0.1.3
IBM UrbanCode Deploy=6.0.1.4
IBM UrbanCode Deploy=6.0.1.5
IBM UrbanCode Deploy=6.0.1.6
IBM UrbanCode Deploy=6.0.1.7
IBM UrbanCode Deploy=6.0.1.8
IBM UrbanCode Deploy=6.0.1.9
IBM UrbanCode Deploy=6.0.1.10
IBM UrbanCode Deploy=6.0.1.11
IBM UrbanCode Deploy=6.0.1.12
IBM UrbanCode Deploy=6.0.1.13
IBM UrbanCode Deploy=6.0.1.14
IBM UrbanCode Deploy=6.1
IBM UrbanCode Deploy=6.1.0.1
IBM UrbanCode Deploy=6.1.0.2
IBM UrbanCode Deploy=6.1.0.3
IBM UrbanCode Deploy=6.1.0.4
IBM UrbanCode Deploy=6.1.1
IBM UrbanCode Deploy=6.1.1.1
IBM UrbanCode Deploy=6.1.1.2
IBM UrbanCode Deploy=6.1.1.3
IBM UrbanCode Deploy=6.1.1.4
IBM UrbanCode Deploy=6.1.1.5
IBM UrbanCode Deploy=6.1.1.6
IBM UrbanCode Deploy=6.1.1.7
IBM UrbanCode Deploy=6.1.1.8
IBM UrbanCode Deploy=6.1.2
IBM UrbanCode Deploy=6.1.3
IBM UrbanCode Deploy=6.1.3.1
IBM UrbanCode Deploy=6.1.3.2
IBM UrbanCode Deploy=6.1.3.3
IBM UrbanCode Deploy=6.2.0.0
IBM UrbanCode Deploy=6.2.0.1
IBM UrbanCode Deploy=6.2.0.2
IBM UrbanCode Deploy=6.2.1
IBM UrbanCode Deploy=6.2.1.1
IBM UrbanCode Deploy=6.2.2
IBM UrbanCode Deploy=6.2.2.1
Remediation
Patch Available
Event History
Feb 1, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-2942?
CVE-2016-2942 is classified as a high severity vulnerability.
2
How do I fix CVE-2016-2942?
To fix CVE-2016-2942, upgrade to the latest version of IBM UrbanCode Deploy that addresses this vulnerability.
3
What versions of IBM UrbanCode Deploy are affected by CVE-2016-2942?
CVE-2016-2942 impacts versions 6.0, 6.0.1, and 6.1 of IBM UrbanCode Deploy.
4
What type of attack does CVE-2016-2942 enable?
CVE-2016-2942 allows authenticated attackers to execute arbitrary processes on remote UCD agent machines.
5
Who is affected by CVE-2016-2942?
Organizations using vulnerable versions of IBM UrbanCode Deploy with special permissions are at risk of CVE-2016-2942.