CVE-2020-4202

Published: Apr 23, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.

Affected (2)

Products: Ibm: Urbancode Deploy

Ibm

1 product

Urbancode Deploy

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Urbancode Deploy	From 7.0.3.0 to 7.0.3.4
Ibm Urbancode Deploy	From 7.0.4.0 to 7.0.4.3

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/174955

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6195701

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/174955

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6195701

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.