CVE-2016-4322 BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging...
CriticalCVSS 9.8
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bmc bladelogic server automation console | = 8.7.00 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20160904 Unauthenticated Arbitrary Directory Dump in BMC BladeLogic Server Automation mailing-list
- 92736 third-party-advisory vdb-entry