CVE-2018-9024 An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
MediumCVSS 5.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom privileged access manager | >= 2.0.0, < 3.0.0 | 3.0.0 |
| ca technologies CA Privileged Access Manager | = 2.x | No fix listed |
References
- 104496 third-party-advisory vdb-entry
- support.ca.com vendor-advisory