CVE-2016-5803

An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

• CWE-22

• http://www.securityfocus.com/bid/94243Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-16-315-01Mitigation, Third Party Advisory, US Government Resource
• https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html
• http://www.securityfocus.com/bid/94243Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-16-315-01Mitigation, Third Party Advisory, US Government Resource
• https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html

Published

Feb 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5797Tollgrade LightHouse SMS before 5.1 patch 3 provides differe…
• CVE-2016-5798An issue was discovered in Fatek Automation PM Designer V3 V…
• CVE-2016-5799Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G32…
• CVE-2016-5800A malicious attacker can trigger a remote buffer overflow in…
• CVE-2016-5801An issue was discovered in OmniMetrix OmniView, Version 1.2.…
• CVE-2016-5802An issue was discovered in Delta Electronics WPLSoft, Versio…
• CVE-2016-5804Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate…9.8
• CVE-2016-5805An issue was discovered in Delta Electronics WPLSoft, Versio…
• CVE-2016-5806Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5807Tollgrade LightHouse SMS before 5.1 patch 3 allows remote au…
• CVE-2016-5808Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5809An issue was discovered on Schneider Electric IONXXXX series…