PT-2019-13464 · Ca Technologies · Ca Workload Automation Ae+2

Fredrik Ravne · Publicado 2019-09-06 · Atualizado 2020-10-06 · CVE-2019-13656

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Technologies Client Automation version 14 CA Workload Automation AE versions 11.3.5 through 11.3.6

Description An access issue in CA Common Services DIA allows a remote attacker to execute arbitrary code.

Recommendations For CA Technologies Client Automation version 14, update to a version that includes the fix for this issue. For CA Workload Automation AE versions 11.3.5 through 11.3.6, update to a version that includes the fix for this issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2019-13656

Produtos afetados

Ca Client Automation

Ca Common Services Dia

Ca Workload Automation Ae

Referências · 6

• https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html · Aviso do Fabricante
• https://seclists.org/bugtraq/2019/Sep/14 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13656 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13656 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2019/Sep/15 · Nota
• http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html · Nota