CVE-2019-7392

概要

参考情報

• securityfocus.com/bid/107040 · Third Party Advisory
• support.ca.com/us/product-content/recommended-reading/security-notices/CA20190212-01--security-notice-for-ca-privileged-access-manager.html · Vendor Advisory

privileged access manager のその他の脆弱性

• CVE-2018-9029緊急 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
• CVE-2018-9028高 7.5Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
• CVE-2018-9026高 7.5A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte…
• CVE-2018-9025高 7.5An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp…
• CVE-2018-9024中 5.3An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.