CVE-2016-4322
CRITICALBMC BladeLogic Server Automation <8.7.3 - Auth Bypass
Title source: llmDescription
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.
References (3)
Scores
CVSS v3
9.8
EPSS
0.0245
EPSS Percentile
85.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
bmc/bladelogic_server_automation_console
Timeline
Published
Dec 13, 2016
Tracked Since
Feb 18, 2026