CVE-2019-7394

HIGH 8.8CVE-2019-7394 · Published 28/05/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
risk authentication ca	`= 3.1= 9.0≥ 8.0, ≤ 8.2.1`	No fix yet
strong authentication ca	`= 7.1= 9.0≥ 8.0, ≤ 8.2.1`	No fix yet

Description

A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.

References

packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html · Third Party Advisory
seclists.org/fulldisclosure/2019/May/43 · Mailing List
securityfocus.com/bid/108483 · Third Party Advisory
seclists.org/bugtraq/2019/May/66 · Mailing List
support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free