CVE-2020-8010
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - vuln@ca.com
- Published
- 2020-02-18
- Last modified
- 2024-08-04
Affected products
- Unified Infrastructure Management (Broadcom)
- Ca Unified Infrastructure Management Nimsoftuim (Ca Technologies - A Broadcom Company)
References
- http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html
- https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastr…
- https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-c…