{"id":"CVE-2016-0320","state":"PUBLISHED","title":"IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect th","description":"IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.","publishedAt":"2017-02-01T22:00:00.000Z","updatedAt":"2024-08-05T22:15:23.380Z","severity":null,"assigner":"ibm","products":["IBM Corporation UrbanCode Deploy"],"affected":[{"vendor":"IBM Corporation","product":"UrbanCode Deploy","versions":[{"version":"6.1.0.2","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.1.1","status":"affected"},{"version":"6.0.1.2","status":"affected"},{"version":"6.0.1.3","status":"affected"},{"version":"6.0.1.4","status":"affected"},{"version":"6.0.1.5","status":"affected"},{"version":"6.0.1.6","status":"affected"},{"version":"6.1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1.0.3","status":"affected"},{"version":"6.0.1.7","status":"affected"},{"version":"6.0.1.8","status":"affected"},{"version":"6.1.0.4","status":"affected"},{"version":"6.1.1","status":"affected"},{"version":"6.1.1.1","status":"affected"},{"version":"6.1.1.2","status":"affected"},{"version":"6.1.1.3","status":"affected"},{"version":"6.1.1.4","status":"affected"},{"version":"6.1.1.5","status":"affected"},{"version":"6.0.1.9","status":"affected"},{"version":"6.1.1.6","status":"affected"},{"version":"6.1.1.7","status":"affected"},{"version":"6.1.2","status":"affected"},{"version":"6.0.1.10","status":"affected"},{"version":"6.0.1.11","status":"affected"},{"version":"6.1.1.8","status":"affected"},{"version":"6.1.3","status":"affected"},{"version":"6.1.3.1","status":"affected"},{"version":"6.2","status":"affected"},{"version":"6.2.0.1","status":"affected"},{"version":"6.0.1.12","status":"affected"},{"version":"6.1.3.2","status":"affected"},{"version":"6.2.0.2","status":"affected"},{"version":"6.2.1","status":"affected"},{"version":"6.0.1.13","status":"affected"},{"version":"6.2.1.1","status":"affected"},{"version":"6.0.1.14","status":"affected"},{"version":"6.1.3.3","status":"affected"},{"version":"6.2.1.2","status":"affected"},{"version":"6.2.2","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/95974","http://www.ibm.com/support/docview.wss?uid=swg2C1000222"],"weaknesses":[],"ingestedAt":"2026-10-29T19:42:22.336Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/0xxx/CVE-2016-0320.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2016-0320","state":"PUBLISHED","datePublished":"2017-02-01T22:00:00.000Z","dateUpdated":"2024-08-05T22:15:23.380Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2015-12-08T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes."}],"affected":[{"vendor":"IBM Corporation","product":"UrbanCode Deploy","versions":[{"version":"6.1.0.2","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.1.1","status":"affected"},{"version":"6.0.1.2","status":"affected"},{"version":"6.0.1.3","status":"affected"},{"version":"6.0.1.4","status":"affected"},{"version":"6.0.1.5","status":"affected"},{"version":"6.0.1.6","status":"affected"},{"version":"6.1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1.0.3","status":"affected"},{"version":"6.0.1.7","status":"affected"},{"version":"6.0.1.8","status":"affected"},{"version":"6.1.0.4","status":"affected"},{"version":"6.1.1","status":"affected"},{"version":"6.1.1.1","status":"affected"},{"version":"6.1.1.2","status":"affected"},{"version":"6.1.1.3","status":"affected"},{"version":"6.1.1.4","status":"affected"},{"version":"6.1.1.5","status":"affected"},{"version":"6.0.1.9","status":"affected"},{"version":"6.1.1.6","status":"affected"},{"version":"6.1.1.7","status":"affected"},{"version":"6.1.2","status":"affected"},{"version":"6.0.1.10","status":"affected"},{"version":"6.0.1.11","status":"affected"},{"version":"6.1.1.8","status":"affected"},{"version":"6.1.3","status":"affected"},{"version":"6.1.3.1","status":"affected"},{"version":"6.2","status":"affected"},{"version":"6.2.0.1","status":"affected"},{"version":"6.0.1.12","status":"affected"},{"version":"6.1.3.2","status":"affected"},{"version":"6.2.0.2","status":"affected"},{"version":"6.2.1","status":"affected"},{"version":"6.0.1.13","status":"affected"},{"version":"6.2.1.1","status":"affected"},{"version":"6.0.1.14","status":"affected"},{"version":"6.1.3.3","status":"affected"},{"version":"6.2.1.2","status":"affected"},{"version":"6.2.2","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/95974","name":"95974","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg2C1000222","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Bypass Security","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2017-02-03T10:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2016-11-28T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2016-0320","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"UrbanCode Deploy","version":{"version_data":[{"version_value":"6.1.0.2"},{"version_value":"6.0"},{"version_value":"6.0.1"},{"version_value":"6.0.1.1"},{"version_value":"6.0.1.2"},{"version_value":"6.0.1.3"},{"version_value":"6.0.1.4"},{"version_value":"6.0.1.5"},{"version_value":"6.0.1.6"},{"version_value":"6.1"},{"version_value":"6.1.0.1"},{"version_value":"6.1.0.3"},{"version_value":"6.0.1.7"},{"version_value":"6.0.1.8"},{"version_value":"6.1.0.4"},{"version_value":"6.1.1"},{"version_value":"6.1.1.1"},{"version_value":"6.1.1.2"},{"version_value":"6.1.1.3"},{"version_value":"6.1.1.4"},{"version_value":"6.1.1.5"},{"version_value":"6.0.1.9"},{"version_value":"6.1.1.6"},{"version_value":"6.1.1.7"},{"version_value":"6.1.2"},{"version_value":"6.0.1.10"},{"version_value":"6.0.1.11"},{"version_value":"6.1.1.8"},{"version_value":"6.1.3"},{"version_value":"6.1.3.1"},{"version_value":"6.2"},{"version_value":"6.2.0.1"},{"version_value":"6.0.1.12"},{"version_value":"6.1.3.2"},{"version_value":"6.2.0.2"},{"version_value":"6.2.1"},{"version_value":"6.0.1.13"},{"version_value":"6.2.1.1"},{"version_value":"6.0.1.14"},{"version_value":"6.1.3.3"},{"version_value":"6.2.1.2"},{"version_value":"6.2.2"}]}}]},"vendor_name":"IBM Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Bypass Security"}]}]},"references":{"reference_data":[{"name":"95974","refsource":"BID","url":"http://www.securityfocus.com/bid/95974"},{"name":"http://www.ibm.com/support/docview.wss?uid=swg2C1000222","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg2C1000222"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/95974","name":"95974","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg2C1000222","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T22:15:23.380Z"}}]}}}