CVE-2018-9025

概要

参考情報

• securityfocus.com/bid/104496 · Third Party Advisory
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html · Vendor Advisory

privileged access manager のその他の脆弱性

• CVE-2019-7392緊急 9.1An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gai…
• CVE-2018-9029緊急 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
• CVE-2018-9028高 7.5Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
• CVE-2018-9026高 7.5A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte…
• CVE-2018-9024中 5.3An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.