CVE-2017-1493

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
IBM	UrbanCode Deploy	6.1.0.2; 6.1; 6.1.0.1; 6.1.0.3; 6.1.0.4; 6.1.1; 6.1.1.1; 6.1.1.2; 6.1.1.3; 6.1.1.4; 6.1.1.5; 6.1.1.6; 6.1.1.7; 6.1.2; 6.1.1.8; 6.1.3; 6.1.3.1; 6.2; 6.2.0.1; 6.1.3.2

References

http://www.ibm.com/support/docview.wss?uid=swg2C1000367Vendor Advisory
http://www.securityfocus.com/bid/102483Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/128691VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg2C1000367Vendor Advisory
http://www.securityfocus.com/bid/102483Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/128691VDB Entry, Vendor Advisory

Timeline

Published: Jan 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-149305.5Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, a CVE-2017-149315.5ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer o CVE-2017-149325.5decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote at CVE-2017-149335.5read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows rem CVE-2017-149345.5process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote a CVE-2017-149357.5Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sens CVE-2017-149374.7The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (CVE-2017-149385.5_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows CVE-2017-149395.5decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a len CVE-2017-14945.4IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2017-149405.5scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remo CVE-2017-149416.5Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve