CVE-2016-9164

HIGH 7.5CVE-2016-9164 · Published 07/03/2017 · updated 17/06/2026

In short

CVE-2016-9164 is a HIGH (CVSS 7.5) vulnerability affecting unified infrastructure management (ca).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified infrastructure management ca	`≤ 8.4`	No fix yet

Description

Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via unspecified vectors.

References

packetstormsecurity.com/files/139661/CA-Unified-Infrastructure-Management-Bypass-Traversal-Disclosure.html · Third Party Advisory
seclists.org/fulldisclosure/2016/Nov/55 · Third Party Advisory
securityfocus.com/bid/94257 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-16-607 · Third Party Advisory
ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html · Vendor Advisory

More vulnerabilities in unified infrastructure management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified infrastructure management

≤ 8.4

No fix yet

More vulnerabilities in unified infrastructure management

See all →