IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/95975 | vdb entry third party advisory |
http://www.ibm.com/support/docview.wss?uid=swg2C1000218 | patch vendor advisory |