CVE-2016-9491

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /register.do page (most likely limited to administrator), to browse the filesystem and read the system files, including Applications Manager configuration, stored private keys, etc. By default Application Manager is running with administrative privileges, therefore it is possible to access every directory on the underlying operating system.

Metrics

CVSS 3.0 4.9/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611 CWE-200

Affected software

Vendor	Product	Versions
ManageEngine	Applications Manager	12; 13

References

http://seclists.org/fulldisclosure/2017/Apr/9Mailing List, Third Party Advisory
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9491.htmlVendor Advisory
https://www.securityfocus.com/bid/97394/Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Apr/9Mailing List, Third Party Advisory
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9491.htmlVendor Advisory
https://www.securityfocus.com/bid/97394/Third Party Advisory, VDB Entry

Timeline

Published: Jul 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-94929.8The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the CVE-2016-94936.1The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.l CVE-2016-94946.5Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validatio CVE-2016-94958.8Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's de CVE-2016-94966.5Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send CVE-2016-94978.8Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alt CVE-2016-94989.8ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be expl CVE-2016-94995.3Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker CVE-2016-95006.1Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (cust CVE-2016-95325.5Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial CVE-2016-95339.8tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog hor CVE-2016-95349.8tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members.