CVE-2019-19230

CRITICO 9.8CVE-2019-19230 · Published 09/12/2019 · updated 17/06/2026

In breve

CVE-2019-19230 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda nolio (broadcom).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.8%, superiore al 89.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
nolio broadcom	`= 6.6`	No fix yet

Description

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.

References

packetstormsecurity.com/files/155631/CA-Nolio-6.6-Arbitrary-Code-Execution.html · Third Party Advisory
seclists.org/fulldisclosure/2019/Dec/16 · Third Party Advisory
seclists.org/bugtraq/2019/Dec/16 · Third Party Advisory
techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191209-01-security-notice-for-ca-nolio-release-automation.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free