unified infrastructure management vulnerabilities and fixes

Recent CVEs affecting unified infrastructure management, with upgrade or downgrade steps. 10 tracked.

Also searched as: unifiedinfrastructuremanagement.

unified infrastructure management has 10 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2020-11-23. Highest priority: CVE-2020-8012 (score 69/100).

• CVE-2020-8012 CRITICAL 9.8 UPGRADE CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow
• CVE-2020-8011 HIGH 7.5 UPGRADE CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer de
• CVE-2020-8010 CRITICAL 9.8 UPGRADE CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL h
• CVE-2020-28421 HIGH 7.8 UPGRADE CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) compo
• CVE-2018-13821 CRITICAL 9.8 DOWNGRADE A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attacke
• CVE-2018-13820 HIGH 7.5 DOWNGRADE A hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to acc
• CVE-2018-13819 HIGH 7.5 DOWNGRADE A hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows attackers to acc
• CVE-2016-9165 HIGH 7.5 UPGRADE UPGRADE The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and
• CVE-2016-9164 HIGH 7.5 UPGRADE Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsof
• CVE-2016-5803 HIGH 8.6 UPGRADE An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier

FAQ

How do I fix unified infrastructure management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unified infrastructure management being exploited right now?

None of the tracked unified infrastructure management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unified infrastructure management CVE should I patch first?

CVE-2020-8012 currently ranks highest (69/100): CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow.

RSS feed for unified infrastructure management · ← Back to latest CVEs