CVE-2016-9165

CA Unified Infrastructure Management get_sessions Session Information Disclosure Remote Authentication Bypass Vulnerability

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via unspecified vectors.

El servlet get_sessions en CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) en versiones anteriores a 8.5 y CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) permite a atacantes remotos tener ids sesion activa y en consecuencia evitar la autenticación o obtener privilegios a través de vectores no especificados.

This vulnerability allows remote attackers to disclose session information on vulnerable installations of CA Unified Infrastructure Management. Authentication is not required to exploit this vulnerability.
The specific flaw exists within processing of the get_sessions servlet. The servlet can return the session IDs for all active sessions. An attacker can use this information to hijack any current active session, including administrative sessions.

*Credits: rgod

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-11-03 CVE Reserved
2016-11-09 CVE Published
2024-08-06 CVE Updated
2024-08-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/94257	Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-16-606	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html	2017-03-23

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ca Search vendor "Ca"		Unified Infrastructure Management Search vendor "Ca" for product "Unified Infrastructure Management"				<= 8.47 Search vendor "Ca" for product "Unified Infrastructure Management" and version " <= 8.47"		-		Affected
Ca Search vendor "Ca"		Unified Infrastructure Management Snap Search vendor "Ca" for product "Unified Infrastructure Management Snap"				<= 8.47 Search vendor "Ca" for product "Unified Infrastructure Management Snap" and version " <= 8.47"		-		Affected