CVE-2016-1542
62Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 75%
de la publicación al arma318 días
Publicada en NVD13 jun
1ª PoC+318d
metasploit16 mar
probabilidad de explotación
75%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
7 exploit(s) público(s)
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
Productos afectados
n/a · n/aPoCs públicas encontradas — 7✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43939exploitdbwww.exploit-db.com/exploits/43902no verificadogithubgithub.com/bao7uo/bmc_bladelogic★ 20githubgithub.com/patriknordlen/bladelogic_bmc-cve-2016-1542★ 0cve_referencewww.exploit-db.com/exploits/43902/no verificadocve_referencewww.exploit-db.com/exploits/43939/no verificadocve_referencepacketstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.htmlhttps://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solutionhttps://www.exploit-db.com/exploits/43902/https://www.exploit-db.com/exploits/43939/https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/http://www.securityfocus.com/archive/1/537909/100/0/threaded