| Package | Affected versions | Patched versions |
|---|---|---|
| unified infrastructure management | ≤ 8.47 | |
| unified infrastructure management snap | ≤ 8.47 |
The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free