CVE-2016-5334 Information disclosure in n/a
Remote attackers can read sensitive configuration files from VMware Identity Manager and vRealize Automation, exposing internal application details.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5334?
CVE-2016-5334 is a medium-severity vulnerability in n/a, published on 29 Dec 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.
Weakness: CWE-668
Which versions are affected by CVE-2016-5334?
It affects 2 products.
Products include Vmware Identity Manager, Vmware Vrealize Automation.
How do I fix CVE-2016-5334?
No fix has been published for CVE-2016-5334 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5334 being exploited?
There is no known exploitation of CVE-2016-5334 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2022-22955 Auth bypass in VMware Workspace ONE Access
- CVE-2022-22956 Auth bypass in VMware Workspace ONE Access
- CVE-2016-5335 Privilege escalation in n/a
- CVE-2021-22056 Server-side request forgery in VMware Workspace ONE Access and Identity Manager
- CVE-2022-31665 Code injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation
Sources
Also known as GHSA-xgc4-84f6-p6xr.