CVE-2016-8938: Critical severity IBM UrbanCode Deploy vulnerability
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8938?
CVE-2016-8938 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2016-8938?
To fix CVE-2016-8938, upgrade to the latest version of IBM UrbanCode Deploy that includes the necessary security patches.
What versions of IBM UrbanCode Deploy are affected by CVE-2016-8938?
CVE-2016-8938 affects IBM UrbanCode Deploy versions 6.0 to 6.2.2.1.
What happens if I don't address CVE-2016-8938?
If CVE-2016-8938 is not addressed, attackers could potentially execute arbitrary code on your IBM UrbanCode Deploy server and associated agent machines.
How can I determine if my IBM UrbanCode Deploy installation is vulnerable to CVE-2016-8938?
You can determine vulnerability to CVE-2016-8938 by checking your installed version of IBM UrbanCode Deploy against the listed affected versions.