CVE-2016-5807

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request.

• CWE-284

• http://www.securityfocus.com/bid/91728
• https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/91728
• https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01Third Party Advisory, US Government Resource

Published

Jul 15, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5801An issue was discovered in OmniMetrix OmniView, Version 1.2.…
• CVE-2016-5802An issue was discovered in Delta Electronics WPLSoft, Versio…
• CVE-2016-5803An issue was discovered in CA Unified Infrastructure Managem…
• CVE-2016-5804Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate…9.8
• CVE-2016-5805An issue was discovered in Delta Electronics WPLSoft, Versio…
• CVE-2016-5806Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5808Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5809An issue was discovered on Schneider Electric IONXXXX series…
• CVE-2016-5810upAdminPg.asp in Advantech WebAccess before 8.1_20160519 all…
• CVE-2016-5811An issue was discovered in Visonic PowerLink2, all versions …6.1
• CVE-2016-5812Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G32…
• CVE-2016-5813An issue was discovered in Visonic PowerLink2, all versions …