CVE-2016-9165

概要

参考情報

• securityfocus.com/bid/94257 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-16-606 · Third Party Advisory
• ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html · Vendor Advisory

unified infrastructure management のその他の脆弱性

• CVE-2018-13821緊急 9.8A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of att…
• CVE-2018-13820高 7.5A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2018-13819高 7.5A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2016-9164高 7.5Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier…