CVE-2016-4322
CriticalSummary
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication, consequently reading arbitrary files or possibly having unspecified other impact by leveraging a 'logic flaw' in the authentication process.
Risk Assessment
Bypassing authentication poses a serious threat to data security within the organization, allowing attackers access to sensitive information.
Recommendation
It is recommended to update BMC BladeLogic Server Automation to version 8.7 Patch 3 or later to secure the system against these vulnerabilities.
Original NVD description (English source)
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.