PT-2018-18737 · Ca · Ca Workload Control Center

Publicado 2018-04-11 · Atualizado 2018-05-17 · CVE-2018-8954

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Workload Control Center versions prior to r11.4 SP6

Description The issue allows remote attackers to execute arbitrary code via a crafted HTTP request.

Recommendations For CA Workload Control Center versions prior to r11.4 SP6, update to version r11.4 SP6 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-8954

Produtos afetados

Ca Workload Control Center

Referências · 5

• http://securitytracker.com/id/1040605 · Nota
• https://osv.dev/vulnerability/CVE-2018-8954 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8954 · Nota de Segurança
• http://securityfocus.com/bid/103742 · Nota
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.html · Aviso do Fabricante