CVE-2019-19230

CRITICAL 9.8CVE-2019-19230 · Published 09/12/2019 · updated 17/06/2026

In short

CVE-2019-19230 is a CRITICAL (CVSS 9.8) vulnerability affecting nolio (broadcom).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 89.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nolio broadcom	`= 6.6`	No fix yet

Description

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.

References

packetstormsecurity.com/files/155631/CA-Nolio-6.6-Arbitrary-Code-Execution.html · Third Party Advisory
seclists.org/fulldisclosure/2019/Dec/16 · Third Party Advisory
seclists.org/bugtraq/2019/Dec/16 · Third Party Advisory
techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191209-01-security-notice-for-ca-nolio-release-automation.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free