Critical severity9.8NVD Advisory· Published Dec 13, 2016· Updated Jun 17, 2026
CVE-2016-4322
CVE-2016-4322
Description
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.
Affected products
2cpe:2.3:a:bmc:bladelogic_server_automation_console:8.7.00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bmc:bladelogic_server_automation_console:8.7.00:*:*:*:*:*:*:*
- (no CPE)range: <8.7 Patch 3
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/138600/BMC-BladeLogic-Server-Automation-For-Linux-8.7-Directory-Dump.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/92736nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/539351/100/0/threadednvd
News mentions
0No linked articles in our index yet.