CVE-2016-10086: High severity CA Service Desk Management vulnerability
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10086?
CVE-2016-10086 has been classified as a medium severity vulnerability.
How do I fix CVE-2016-10086?
To remediate CVE-2016-10086, update CA Service Desk Manager to version 14.1 or CA Service Desk Management to version 12.9 with the latest security patches applied.
Who is affected by CVE-2016-10086?
CVE-2016-10086 affects users of CA Service Desk Manager version 12.9 and CA Service Desk Management version 14.1.
What type of vulnerability is CVE-2016-10086?
CVE-2016-10086 is an access control vulnerability that allows remote authenticated users to read or modify task information.
What can attackers do with CVE-2016-10086?
Attackers exploiting CVE-2016-10086 can leverage incorrect permissions to access or change task data within affected CA Service Desk applications.