Vulnerability CVE-2016-10086

Vulnerability CVE-2016-10086

Published: 2017-01-18 Modified: 2017-01-19

Description:

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5.5/10	4.9/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	None

Affected software
CA -> Service desk manager
CA -> Service desk management

References:

http://www.securityfocus.com/bid/95366

http://www.securitytracker.com/id/1037583

https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html

Vulnerability CVE-2016-10086

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:N)

5.5/10

4.9/10

8/10

Remote

Low

Single time

Partial

Partial

None

Affected software

References: