PT-2019-13466 · Ca · Ca Network Flow Analysis

Hendrik Van Belleghem · Publicado 2019-10-02 · Atualizado 2021-04-09 · CVE-2019-13658

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Network Flow Analysis versions 9.x through 10.0.x

Description The issue allows a remote attacker to execute arbitrary commands and compromise system security due to a default credential vulnerability.

Recommendations For CA Network Flow Analysis versions 9.x through 10.0.x, update the default credentials to secure ones to prevent unauthorized access.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-13658

Produtos afetados

Ca Network Flow Analysis

Referências · 6

• http://seclists.org/fulldisclosure/2019/Oct/6 · Nota
• https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13658 · Nota de Segurança
• http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html · Nota
• https://seclists.org/bugtraq/2019/Oct/4 · Nota
• https://osv.dev/vulnerability/CVE-2019-13658 · Aviso do Fabricante