CVE-2018-9023 An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
HighCVSS 8.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom privileged access manager | >= 2.0.0, < 3.0.0 | 3.0.0 |
| ca technologies CA Privileged Access Manager | = 2.x | No fix listed |
References
- 104496 third-party-advisory vdb-entry
- support.ca.com vendor-advisory