PT-2017-7725 · Ca · Ca Service Desk Management+1

Published 2017-01-18 · Updated 2017-01-20 · CVE-2016-10086

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions CA Service Desk Manager version 12.9 CA Service Desk Management version 14.1

Description The issue concerns incorrect permissions applied to RESTful requests, potentially allowing remote authenticated users to read or modify task information.

Recommendations For CA Service Desk Manager version 12.9, update the permissions for RESTful requests to ensure proper access control. For CA Service Desk Management version 14.1, review and correct the permissions applied to RESTful requests to prevent unauthorized access to task information.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-10086

Affected Products

Ca Service Desk Management

Ca Service Desk Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-10086 · Security Note
• https://ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10086 · Vendor Advisory
• http://securityfocus.com/bid/95366 · Note
• http://securitytracker.com/id/1037583 · Note