CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.

• CWE-287

• http://seclists.org/bugtraq/2016/Jun/43Third Party Advisory
• http://www.securitytracker.com/id/1036075Third Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2016/Jun/43Third Party Advisory
• http://www.securitytracker.com/id/1036075Third Party Advisory, VDB Entry

Published

Jun 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0910EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004,…
• CVE-2016-0911EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a defa…
• CVE-2016-0912EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows rem…
• CVE-2016-0913The client in EMC Replication Manager (RM) before 5.5.3.0_01…
• CVE-2016-0914EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before P…
• CVE-2016-0915The Self-Service Portal in EMC RSA Authentication Manager (A…8.1
• CVE-2016-0917The SMB service in EMC VNXe (VNXe3200 Operating Environment …
• CVE-2016-0918EMC RSA Identity Management and Governance before 6.8.1 P25 …
• CVE-2016-0919EMC RSA Web Threat Detection version 5.0, RSA Web Threat Det…6.1
• CVE-2016-0920Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in …
• CVE-2016-0921Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in …
• CVE-2016-0922EMC ViPR SRM before 3.7.2 does not restrict the number of pa…