PT-2016-6688

Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management versions 8.47 and earlier Description An issue was discovered where the Unified Infrastructure Management software does not properly neutralize sequences such as '..' in pathnames constructed from external...

PT-2016-7675

Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management versions 8.4 SP1 and earlier CA Unified Infrastructure Management Snap versions 8.4 SP1 and earlier Description The issue allows remote attackers to read arbitrary files via unspecified vectors due to a...

PT-2016-7676

Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management versions prior to 8.5 CA Unified Infrastructure Management Snap versions prior to 8.5 Description The issue allows remote attackers to obtain active session ids, which can be used to bypass authentication o...

CA Unified Infrastructure Management diag Path Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information from vulnerable installations of CA Unified Infrastructure Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the diag.jsp servlet. The servlet is...