CVE-2020-4848: Medium severity ibm urbancode deploy vulnerability
IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 190293.
Other sources
IBM UrbanCode Deploy (UCD) could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4848?
The severity of CVE-2020-4848 is medium with a CVSS severity score of 5.4.
How can an authenticated user exploit CVE-2020-4848?
An authenticated user can exploit CVE-2020-4848 by initiating a plugin or compare process to access resources they should not have access to.
Which versions of IBM UrbanCode Deploy are affected by CVE-2020-4848?
IBM UrbanCode Deploy versions 6.2.7.9, 7.0.5.4, and 7.1.1.1 are affected by CVE-2020-4848.
Is there a fix available for CVE-2020-4848?
Yes, IBM has provided a fix for CVE-2020-4848. Please refer to the official IBM support page for more information.
Where can I find more information about CVE-2020-4848?
You can find more information about CVE-2020-4848 on the IBM X-Force Exchange website and the official IBM support page.