high8.6
CVE-2016-5803
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier.
Impact
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ca Technologies | Unified Infrastructure Management | through 8.47 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94243
- https://ics-cert.us-cert.gov/advisories/ICSA-16-315-01
- https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html
- http://www.securityfocus.com/bid/94243
- https://ics-cert.us-cert.gov/advisories/ICSA-16-315-01
- https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html