CVEvulnerability
CVE-2016-10086
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.
Affected configurations
• ca service desk management 14.1
• ca service desk manager 12.9
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/95366 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037583 Third Party Advisory, VDB Entry
- https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/95366 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037583 Third Party Advisory, VDB Entry
- https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html Patch, Vendor Advisory