90 matches found
CVE-2018-13821
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing...
CVE-2018-13821
CA Unified Infrastructure Management (UIM) versions 8.5.1, 8.5, and 8.4.7 are affected by CVE-2018-13821 due to a lack of authentication. This allows remote attackers to perform a range of actions, including reading and writing files. The vulnerability is documented in multiple sources (NVD entry...
CVE-2018-13820
CVE-2018-13820 affects CA Unified Infrastructure Management (UIM) versions 8.5.1, 8.5, and 8.4.7 due to a hardcoded passphrase, which could allow an attacker to access sensitive information. The vulnerability is described across multiple sources (NVD/NVD-derived, CNVD, CNVD-related listings), wit...
CVE-2018-13821: Improper Authentication
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing...
CVE-2018-13820: Use of Hard-coded Credentials
A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information...
CVE-2018-13819: Use of Hard-coded Credentials
A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information...
CVE-2016-9165
The getsessions servlet in CA Unified Infrastructure Management formerly CA Nimsoft Monitor before 8.5 and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via...
CVE-2016-9165
The getsessions servlet in CA Unified Infrastructure Management formerly CA Nimsoft Monitor before 8.5 and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via...
CVE-2016-9165
The CVE-2016-9165 issue affects CA Unified Infrastructure Management (UIM) and CA UIM Snap prior to version 8.5, via the get_sessions servlet. The vulnerability allows remote, unauthenticated attackers to obtain active session IDs, which can be used to hijack sessions and bypass authentication or...
CVE-2016-9165: Exposure of Sensitive Information to an Unauthorized Actor
The getsessions servlet in CA Unified Infrastructure Management formerly CA Nimsoft Monitor before 8.5 and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via...
Directory traversal
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-9164
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-9164
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-9164
CA Unified Infrastructure Management (UIM) diag.jsp contains a directory traversal vulnerability (CVE-2016-9164) that allows remote, unauthenticated attackers to read arbitrary files. Affected products include UIM 8.4 SP1 and earlier (and CA UIM Snap), with disclosures indicating the issue exists...
CVE-2016-9164
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-9164: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-5803
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can...
CVE-2016-5803
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can...
CVE-2016-5803
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can...
CVE-2016-5803
CVE-2016-5803 affects CA Unified Infrastructure Management (UIM) up to version 8.47. The vulnerability is a directory-traversal flaw in the path construction logic that fails to neutralize sequences like "..", allowing an attacker to access files outside the restricted directory. This is a remote...