CVE-2020-8010

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected products

Ca Unified Infrastructure Management

Broadcom Unified Infrastructure Management

≤ 9.20, 20.3.3, 20.1

Fix

Available

CVSS 2.0

10.0 HIGH

CVSS 3.1

9.8 CRITICAL

EPSS

48.7% (99th percentile)

NVD status

Modified

Published

2020-02-18