PT-2019-18578 · Ca · Ca Strong Authentication+1

Rohit Yadav · Publicado 2019-05-28 · Atualizado 2020-10-06 · CVE-2019-7394

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Strong Authentication versions 7.1.x through 9.0.x CA Strong Authentication versions 8.0.x through 8.2.x CA Risk Authentication versions 3.1.x through 9.0.x CA Risk Authentication versions 8.0.x through 8.2.x

Description A privilege escalation issue in the administrative user interface allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.

Recommendations For CA Strong Authentication versions 7.1.x through 9.0.x, update to a version that includes a fix for this issue. For CA Strong Authentication versions 8.0.x through 8.2.x, update to a version that includes a fix for this issue. For CA Risk Authentication versions 3.1.x through 9.0.x, update to a version that includes a fix for this issue. For CA Risk Authentication versions 8.0.x through 8.2.x, update to a version that includes a fix for this issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-7394

Produtos afetados

Ca Risk Authentication

Ca Strong Authentication

Referências · 7

• http://seclists.org/fulldisclosure/2019/May/43 · Nota
• http://securityfocus.com/bid/108483 · Nota
• https://seclists.org/bugtraq/2019/May/66 · Nota
• https://osv.dev/vulnerability/CVE-2019-7394 · Aviso do Fabricante
• https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7394 · Nota de Segurança
• http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html · Nota