CVE-2016-9164

2017-03-0715:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via unspecified vectors.

References

packetstormsecurity.com/files/139661/CA-Unified-Infrastructure-Management-Bypass-Traversal-Disclosure.html

seclists.org/fulldisclosure/2016/Nov/55

www.securityfocus.com/bid/94257

www.zerodayinitiative.com/advisories/ZDI-16-607

www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html