CVE-2017-1286: IBM Urbancode Deploy

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.

Affected products

  • IBM Urbancode Deploy: after 6.1, up to and including 6.9.6.0

Published 2018-08-13. Last modified 2026-06-17.