Back to search
CVE-2016-1542
Published: Jun 13, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20160328 BMC-2015-0010: User enumeration vulnerability in BMC Server Automation (BSA) Unix/Linux RSCD Agent (CVE-2016-1542)
mailing-list
x_refsource_BUGTRAQ
43902
exploit
x_refsource_EXPLOIT-DB
43939
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now