CVE-2016-5803

An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier

published February 13, 2017

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02306 · 83.1th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier
    cvelistv5