CVE-2016-9164

概要

参考情報

• packetstormsecurity.com/files/139661/CA-Unified-Infrastructure-Management-Bypass-Traversal-Disclosure.html · Third Party Advisory
• seclists.org/fulldisclosure/2016/Nov/55 · Third Party Advisory
• securityfocus.com/bid/94257 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-16-607 · Third Party Advisory
• ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html · Vendor Advisory

unified infrastructure management のその他の脆弱性

• CVE-2018-13821緊急 9.8A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of att…
• CVE-2018-13820高 7.5A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2018-13819高 7.5A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2016-9165高 7.5The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Mana…