Skip to content

CVE-2016-10086 RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions a...

HighCVSS 8.1 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.

Affected products

ProductAffected versionsFixed in
ca service desk management = 14.1 No fix listed
ca service desk manager = 12.9 No fix listed

References

  • 95366 third-party-advisory vdb-entry
  • 1037583 third-party-advisory vdb-entry
  • www.ca.com patch vendor-advisory