Unified Infrastructure Management Security Vulnerabilities and Issues — Unified Infrastructure Management CVE List

Lucene search

CaUnified Infrastructure Management

5 matches found

CVE•added 2017/03/07 3:59 p.m.•37 views

CVE-2016-9164

Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via unspecified vectors.

7.5CVSS7.5AI score0.03638EPSS

CVE•added 2017/03/20 4:59 p.m.•36 views

CVE-2016-9165

The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges v...

7.5CVSS7.9AI score0.00941EPSS

CVE•added 2018/08/30 2:29 p.m.•34 views

CVE-2018-13819

A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.

7.5CVSS7.4AI score0.00262EPSS

CVE•added 2018/08/30 2:29 p.m.•31 views

CVE-2018-13821

A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing.

9.8CVSS9.3AI score0.05021EPSS

CVE•added 2018/08/30 2:29 p.m.•27 views

CVE-2018-13820

A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to access sensitive information.

7.5CVSS7.4AI score0.00262EPSS