medium6.0
CVE-2015-4964
IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote a…
Impact
IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Urbancode Deploy | Versions 6.0, 6.0.1.0, 6.0.1.1, 6.0.1.2, 6.0.1.3, 6.0.1.4 |