CVE-2016-10086: Ca Service Desk Management

High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days.

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.

Affected products

• Ca Service Desk Management: version 14.1 only
• Ca Service Desk Manager: version 12.9 only

Published 2017-01-18. Last modified 2026-06-17.