CVE-2020-4482
First published: Fri Sep 25 2020(Updated: )
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM UCD - IBM UrbanCode Deploy | <=6.2.7.4 | |
| IBM UCD - IBM UrbanCode Deploy | <=6.2.7.3 | |
| IBM UCD - IBM UrbanCode Deploy | <=7.0.4.0 | |
| IBM UCD - IBM UrbanCode Deploy | <=7.0.3.0 | |
| IBM UCD - IBM UrbanCode Deploy | <=All | |
| IBM UrbanCode Deploy | =6.2.7.3 | |
| IBM UrbanCode Deploy | =6.2.7.4 | |
| IBM UrbanCode Deploy | =7.0.3.0 | |
| IBM UrbanCode Deploy | =7.0.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM UrbanCode Deploy vulnerability?
The vulnerability ID for this IBM UrbanCode Deploy vulnerability is CVE-2020-4482.
What is the severity of CVE-2020-4482?
The severity of CVE-2020-4482 is medium.
Which versions of IBM UrbanCode Deploy are affected by CVE-2020-4482?
The versions 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 of IBM UrbanCode Deploy are affected by CVE-2020-4482.
How does CVE-2020-4482 impact IBM UrbanCode Deploy?
CVE-2020-4482 allows an authenticated user to bypass security in IBM UrbanCode Deploy by applying unauthorized additional statuses via direct REST calls.
Where can I find more information about CVE-2020-4482?
You can find more information about CVE-2020-4482 on the IBM X-Force ID: 181856.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/author
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm urbancode deploy
- version/ibm urbancode deploy/6.2.7.3
- version/ibm urbancode deploy/6.2.7.4
- version/ibm urbancode deploy/7.0.3.0
- version/ibm urbancode deploy/7.0.4.0
- canonical/ibm ucd - ibm urbancode deploy
- version/ibm ucd - ibm urbancode deploy/6.2.7.4
- version/ibm ucd - ibm urbancode deploy/6.2.7.3
- version/ibm ucd - ibm urbancode deploy/7.0.4.0
- version/ibm ucd - ibm urbancode deploy/7.0.3.0
- version/ibm ucd - ibm urbancode deploy/all