medium6.5
CVE-2020-4482
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security.
Impact
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Urbancode Deploy | Versions 6.2.7.3, 6.2.7.4, 7.0.3.0, 7.0.4.0 |