PT-2017-7725 · Ca · Ca Service Desk Management+1

Publicado 2017-01-18 · Atualizado 2017-01-20 · CVE-2016-10086

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions CA Service Desk Manager version 12.9 CA Service Desk Management version 14.1

Description The issue concerns incorrect permissions applied to RESTful requests, potentially allowing remote authenticated users to read or modify task information.

Recommendations For CA Service Desk Manager version 12.9, update the permissions for RESTful requests to ensure proper access control. For CA Service Desk Management version 14.1, review and correct the permissions applied to RESTful requests to prevent unauthorized access to task information.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-10086

Produtos afetados

Ca Service Desk Management

Ca Service Desk Manager

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-10086 · Nota de Segurança
• http://securityfocus.com/bid/95366 · Nota
• http://securitytracker.com/id/1037583 · Nota
• https://ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-10086 · Aviso do Fabricante