CVE-2018-9021

Description

References

• packetstormsecurity.com/files/155576/Broadcom-CA-Privileged-Access-Manager-2.8.2-Remote-Command-Execution.html · Exploit
• securityfocus.com/bid/104496 · Third Party Advisory
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html · Broken Link

privileged access manager의 다른 취약점

• CVE-2019-7392심각 9.1An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gai…
• CVE-2018-9029심각 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
• CVE-2018-9028높음 7.5Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
• CVE-2018-9026높음 7.5A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte…
• CVE-2018-9025높음 7.5An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp…