ID CVE-2016-5335
Summary VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:vmware:identity_manager:*:*:*:*:*:*:*:*
    cpe:2.3:a:vmware:identity_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vrealize_automation:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:vmware:vrealize_automation:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vrealize_automation:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:vmware:vrealize_automation:7.0.1:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 08-04-2022 - 13:26)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 92608
confirm http://www.vmware.com/security/advisories/VMSA-2016-0013.html
sectrack 1036685
Last major update 08-04-2022 - 13:26
Published 31-08-2016 - 01:59
Last modified 08-04-2022 - 13:26
Back to Top