CVE-2020-8010

Critical · 9.8

CVSS

9.8

EPSS

50.7%

Published

Feb 18, 2020

CISA due date

—

The record

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected packages

Ecosystem	Package	Introduced	Fixed