Description
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CA Unified Infrastructure Management 8.47 and earlier | CA Unified Infrastructure Management 8.47 and earlier | — |
Advisories 1
- ICSA-16-315-01B CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B) CISA ICS & IT advisories · Jun 5, 2025