CVE-2018-9029 An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom privileged access manager | >= 2.0.0, < 3.0.0 | 3.0.0 |
| ca technologies CA Privileged Access Manager | = 2.x | No fix listed |
References
- 104496 third-party-advisory vdb-entry
- support.ca.com vendor-advisory