CVE-2020-4202

IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed…

Medium · published April 23, 2020

CVSS v3.0
5.0
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.

The record
Technical detail
CVSS v3.0
5.0 · MEDIUM
Vector
CVSS:3.0/S:U/AV:N/UI:N/C:L/A:L/I:L/PR:L/AC:H/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Published
2020-04-23T13:10Z
EPSS history
Timeline
  • 23 APR 13:10Z
    IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed…
    cvelistv5