CVE-2016-9148

概要

参考情報

• packetstormsecurity.com/files/139660/CA-Service-Desk-Manaager-12.9-14.1-Code-Execution.html · Third Party Advisory
• seclists.org/fulldisclosure/2016/Nov/53 · Third Party Advisory
• ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-02-security-notice-for-ca-service-desk-manager.html · Vendor Advisory
• securityfocus.com/bid/94258 · Third Party Advisory
• securitytracker.com/id/1037262 · Third Party Advisory

service desk manager のその他の脆弱性

• CVE-2018-19635緊急 9.8CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.
• CVE-2018-19634高 7.5CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.
• CVE-2016-10086高 8.1RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or m…