CVE-2018-13821

概要

参考情報

• securityfocus.com/bid/105199 · Third Party Advisory
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-02--security-notice-for-ca-unified-infrastructure-mgt.html · Mitigation

unified infrastructure management のその他の脆弱性

• CVE-2018-13820高 7.5A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2018-13819高 7.5A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.
• CVE-2016-9165高 7.5The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Mana…
• CVE-2016-9164高 7.5Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier…