broadcom unified infrastructure management 20.1 vulnerabilities and exploits

(subscribe to this query)

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Broadcom Unified Infrastructure Management Broadcom Unified Infrastructure Management 20.1

1 Github repository

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.

Broadcom Unified Infrastructure Management Broadcom Unified Infrastructure Management 20.1

1 EDB exploit1 Github repository

In Apache Commons IO prior to 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furt...

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.

Broadcom Unified Infrastructure Management Broadcom Unified Infrastructure Management 20.1

1 Github repository

CA Unified Infrastructure Management 20.1 and previous versions contains a vulnerability in the robot (controller) component that allows local malicious users to elevate privileges.

Broadcom Unified Infrastructure Management

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook