description: IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes.
problem types: Bypass Security
affected:
{
product: UrbanCode Deploy
vendor: IBM Corporation
versions:
status: affected, version: 6.1.0.2
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.1.1
status: affected, version: 6.0.1.2
status: affected, version: 6.0.1.3
status: affected, version: 6.0.1.4
status: affected, version: 6.0.1.5
status: affected, version: 6.0.1.6
status: affected, version: 6.1
status: affected, version: 6.1.0.1
status: affected, version: 6.1.0.3
status: affected, version: 6.0.1.7
status: affected, version: 6.0.1.8
status: affected, version: 6.1.0.4
status: affected, version: 6.1.1
status: affected, version: 6.1.1.1
status: affected, version: 6.1.1.2
status: affected, version: 6.1.1.3
status: affected, version: 6.1.1.4
status: affected, version: 6.1.1.5
status: affected, version: 6.0.1.9
status: affected, version: 6.1.1.6
status: affected, version: 6.1.1.7
status: affected, version: 6.1.2
status: affected, version: 6.0.1.10
status: affected, version: 6.0.1.11
status: affected, version: 6.1.1.8
status: affected, version: 6.1.3
status: affected, version: 6.1.3.1
status: affected, version: 6.2
status: affected, version: 6.2.0.1
status: affected, version: 6.0.1.12
status: affected, version: 6.1.3.2
status: affected, version: 6.2.0.2
status: affected, version: 6.2.1
status: affected, version: 6.0.1.13
status: affected, version: 6.2.1.1
status: affected, version: 6.0.1.14
status: affected, version: 6.1.3.3
status: affected, version: 6.2.1.2
status: affected, version: 6.2.2
}