Lucene search

MitreCVE-2016-5335

HistoryAug 31, 2016 - 1:59 a.m.

CVE-2016-5335

2016-08-3101:59:18

mitre

web.nvd.nist.gov

cve-2016-5335

vmware

identity manager

vrealize automation

local users

root access

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.

Affected configurations

Nvd

Node

vmwareidentity_managerRange2.0–2.7

vmwarevrealize_automationRange7.0–7.1

VendorProductVersionCPE
vmwareidentity_manager*cpe:2.3:a:vmware:identity_manager:*:*:*:*:*:*:*:*
vmwarevrealize_automation*cpe:2.3:a:vmware:vrealize_automation:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	identity_manager	*	cpe:2.3:a:vmware:identity_manager::::::::
vmware	vrealize_automation	*	cpe:2.3:a:vmware:vrealize_automation::::::::

References

www.securityfocus.com/bid/92608

www.securitytracker.com/id/1036685

www.vmware.com/security/advisories/VMSA-2016-0013.html

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2016-5335