CVE-2016-4322

CVE-2016-4322 affects BMC BladeLogic Server Automation (BSA) prior to 8.7 Patch 3. The flaw is in the authentication logic, allowing remote attackers to bypass authentication and read arbitrary files or cause other unspecified impact. The vulnerability is exploitable remotely with no authenticati...

CVE-2016-4322: Improper Authentication

BMC BladeLogic Server Automation BSA before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process...

PT-2016-5885

Name of the Vulnerable Software and Affected Versions BMC BladeLogic Server Automation BSA versions prior to 8.7 Patch 3 Description The issue allows remote attackers to bypass authentication, which can lead to reading arbitrary files or possibly having other unspecified impacts. This is due to a...

CVE-2016-1542

The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1542

CVE-2016-1542/1543 affect the BMC BladeLogic Server Automation RSCD agent RPC/XMLRPC interface (Linux/UNIX) across 8.2–8.7. The flaws enable remote bypass of authorization and user-related abuse: CVE-2016-1542 allows user enumeration after an auth failure; CVE-2016-1543 permits bypass of authoriz...

CVE-2016-1542: Improper Input Validation

The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1543: Improper Access Control

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

PT-2016-4854

Name of the Vulnerable Software and Affected Versions BMC BladeLogic Server Automation versions 8.2.x through 8.7.x Description The issue allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure. This i...

PT-2016-4853

Name of the Vulnerable Software and Affected Versions BMC BladeLogic Server Automation BSA versions 8.2.x through 8.7.x Description The issue allows remote attackers to bypass authorization and enumerate users by sending an action packet to the xmlrpc endpoint after an authorization failure. This...