CVE-2015-4964

https://notcve.org/view.php?id=CVE-2015-4964

05 Oct 2015 — IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTH_TOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process. IBM UrbanCode Deploy 6.0 y 6.0.1.x en versiones anteriores a 6.0.1.10, 6.1.1.x en versiones anteriores a 6.1.1.8 y 6.1.2 escribe valores admin AUTH_TOKEN para ejecutar logs, lo que permite a usuarios remotos autenticados obtener privilegios mediante el apr... • http://www-01.ibm.com/support/docview.wss?uid=swg21964623 • CWE-264: Permissions, Privileges, and Access Controls •