CVE-2023-42012: IBM UrbanCode Deploy denial of service
An IBM UrbanCode Deploy Agent 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts. IBM X-Force ID: 265509.
Other sources
An IBM UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42012?
CVE-2023-42012 is rated as a denial of service vulnerability affecting specific versions of IBM UrbanCode Deploy.
How do I fix CVE-2023-42012?
To address CVE-2023-42012, update IBM UrbanCode Deploy to a version beyond 7.2.3.7 or 7.3.2.2.
What versions of IBM UrbanCode Deploy are affected by CVE-2023-42012?
CVE-2023-42012 affects IBM UrbanCode Deploy versions 7.2 through 7.2.3.7 and 7.3 through 7.3.2.2.
Can local accounts exploit CVE-2023-42012?
Yes, local accounts can exploit CVE-2023-42012 to launch a denial of service attack against the affected IBM UrbanCode Deploy installations.
Is there a workaround for CVE-2023-42012?
Currently, the recommended action for CVE-2023-42012 is to upgrade to a secure version, as specific workarounds may not be provided.