CVE-2016-8938
CriticalSummary
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.
Risk Assessment
The risk to the organization involves the potential for remote code execution, which could lead to the compromise of production applications and customer data.
Recommendation
It is recommended to implement strict access controls on file upload features and to regularly update the software to mitigate risks.
Original NVD description (English source)
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications.