Improper Permissions in RESTful Requests in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1

Improper Permissions in RESTful Requests in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1

CVE-2016-10086 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:N

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.

Learn more about our Web App Pen Testing.