The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via unspecified vectors.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-03-20T16:00:00
Updated: 2024-08-06T02:42:11.034Z
Reserved: 2016-11-03T00:00:00
Link: CVE-2016-9165
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-03-20T16:59:01.767
Modified: 2024-11-21T03:00:43.680
Link: CVE-2016-9165
Redhat
No data.