CVE-2016-5803

HIGH 8.6CVE-2016-5803 · Published 13/02/2017 · updated 17/06/2026

In short

CVE-2016-5803 is a HIGH (CVSS 8.6) vulnerability affecting unified infrastructure management (ca technologies).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified infrastructure management ca_technologies	`≤ 8.47`	No fix yet

Description

An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References

securityfocus.com/bid/94243 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-16-315-01 · Mitigation
ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free