CVE-2016-0271 - Vulnerability Details

Vendors	Products
Ibm	Urbancode Deploy

Link	Providers
http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-06-01T00:00:00", "descriptions": [{"lang": "en", "value": "The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-07-08T01:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-0271", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:15:23.223Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-0271", "datePublished": "2016-07-08T01:00:00", "dateReserved": "2015-12-08T00:00:00", "dateUpdated": "2024-08-05T22:15:23.223Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-06-01T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-07-08T01:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2016-0271 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

refsource : CONFIRM (string)

url : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:15:23.223Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2016-0271 (string)

datePublished : 2016-07-08T01:00:00 (string)

dateReserved : 2015-12-08T00:00:00 (string)

dateUpdated : 2024-08-05T22:15:23.223Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "49D22F1E-6827-4343-BD5E-376710FF9A50", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "C35B3347-EE12-4E84-92D9-533DA7F1581E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "32C10FFF-250A-4530-B631-1B1DAA3B4BC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "DE176DE5-BB60-4999-A2B4-D93C8AB776DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "751113D0-7085-4AE7-8F39-292293F297FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "31217ED6-C154-49CF-BD65-C272D630F58A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "1F69D247-B168-40EC-BA4B-1C50879B64BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "C822B4AB-4032-4BEB-A413-A80398A28EAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "FF310F06-6674-470E-B258-4DF042B1FA68", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "AEF92016-8494-4EBE-A32F-A123C1517F63", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*", "matchCriteriaId": "744A36AB-5BC8-4FE1-BB91-9BC3019EBB99", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:*", "matchCriteriaId": "A4535B6A-0791-4855-BED4-01A8279F4930", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.0.1.13:*:*:*:*:*:*:*", "matchCriteriaId": "C108D461-F391-491B-B1B4-AEB3155C2196", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*", "matchCriteriaId": "7AF8BEEC-5F93-424B-94F6-622B9BA84CDA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5DE72929-3618-4341-83DC-E4A006EE3D0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "F59AC6D5-1F06-4EC4-BD36-6FA5221AE611", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D7ED1843-E659-4931-8E08-8867D4286A18", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F9BA86C9-0A31-4EBB-B73E-346D6C425988", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "70E082B0-B404-4E5E-9FC7-2B0B6F363A9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "054A3ED4-290A-484D-9F51-93A71968CAA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "7C5B4753-3685-4088-A4B1-C4AE58C11F3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "32732445-6761-40F0-836B-E7EAC9B9239B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "EF8034DC-C20D-4972-AFBA-D3EBF8664164", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "5409F075-5268-476E-BEFE-2B93C8BB2870", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "F43800F6-328E-4481-B6AE-44A50F368314", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "5E3BCD23-4033-443D-B2D5-CAF69FCD22D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "B1A72039-925C-48AE-8012-BA6AEE659D27", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "57A488B1-1221-46C4-B97D-B895368E3A6B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8CFD390D-531E-4BC7-B9D4-74208E153F20", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "93406315-DD19-45E5-84EE-B5D8F0A903D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "1C970147-39E9-4CCC-9FDE-B70546941323", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors."}, {"lang": "es", "value": "Los agentes en IBM UrbanCode Deploy 6.x en versiones anteriores a 6.0.1.14, 6.1.x en versiones anteriores a 6.1.3.3 y 6.2.x en versiones anteriores a 6.2.1.1 no verifica la identidad de un servidor en una sesi\u00f3n JMS o una sesi\u00f3n HTTP, lo que permite a usuarios locales obtener acceso de root a agentes arbitrarios a trav\u00e9s de vectores no especificados."}], "id": "CVE-2016-0271", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-07-08T01:59:02.930", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 49D22F1E-6827-4343-BD5E-376710FF9A50 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C35B3347-EE12-4E84-92D9-533DA7F1581E (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 32C10FFF-250A-4530-B631-1B1DAA3B4BC9 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : DE176DE5-BB60-4999-A2B4-D93C8AB776DB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 751113D0-7085-4AE7-8F39-292293F297FA (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 31217ED6-C154-49CF-BD65-C272D630F58A (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 1F69D247-B168-40EC-BA4B-1C50879B64BF (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : C822B4AB-4032-4BEB-A413-A80398A28EAF (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:* (string)

matchCriteriaId : FF310F06-6674-470E-B258-4DF042B1FA68 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:* (string)

matchCriteriaId : AEF92016-8494-4EBE-A32F-A123C1517F63 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 744A36AB-5BC8-4FE1-BB91-9BC3019EBB99 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:* (string)

matchCriteriaId : A4535B6A-0791-4855-BED4-01A8279F4930 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.0.1.13:*:*:*:*:*:*:* (string)

matchCriteriaId : C108D461-F391-491B-B1B4-AEB3155C2196 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 7AF8BEEC-5F93-424B-94F6-622B9BA84CDA (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 5DE72929-3618-4341-83DC-E4A006EE3D0E (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : F59AC6D5-1F06-4EC4-BD36-6FA5221AE611 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : D7ED1843-E659-4931-8E08-8867D4286A18 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F9BA86C9-0A31-4EBB-B73E-346D6C425988 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 70E082B0-B404-4E5E-9FC7-2B0B6F363A9B (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 054A3ED4-290A-484D-9F51-93A71968CAA9 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C5B4753-3685-4088-A4B1-C4AE58C11F3D (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 32732445-6761-40F0-836B-E7EAC9B9239B (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:* (string)

matchCriteriaId : EF8034DC-C20D-4972-AFBA-D3EBF8664164 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 5409F075-5268-476E-BEFE-2B93C8BB2870 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : F43800F6-328E-4481-B6AE-44A50F368314 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 5E3BCD23-4033-443D-B2D5-CAF69FCD22D0 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : B1A72039-925C-48AE-8012-BA6AEE659D27 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 57A488B1-1221-46C4-B97D-B895368E3A6B (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 8CFD390D-531E-4BC7-B9D4-74208E153F20 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 93406315-DD19-45E5-84EE-B5D8F0A903D8 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C970147-39E9-4CCC-9FDE-B70546941323 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors. (string)

}

1 : { »

lang : es (string)

value : Los agentes en IBM UrbanCode Deploy 6.x en versiones anteriores a 6.0.1.14, 6.1.x en versiones anteriores a 6.1.3.3 y 6.2.x en versiones anteriores a 6.2.1.1 no verifica la identidad de un servidor en una sesión JMS o una sesión HTTP, lo que permite a usuarios locales obtener acceso de root a agentes arbitrarios a través de vectores no especificados. (string)

}

]

id : CVE-2016-0271 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : true (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.5 (number)

impactScore : 6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-07-08T01:59:02.930 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-264 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object