PT-2019-13464 · Ca Technologies · Ca Workload Automation Ae+2

Fredrik Ravne · Published 2019-09-06 · Updated 2020-10-06 · CVE-2019-13656

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Technologies Client Automation version 14 CA Workload Automation AE versions 11.3.5 through 11.3.6

Description An access issue in CA Common Services DIA allows a remote attacker to execute arbitrary code.

Recommendations For CA Technologies Client Automation version 14, update to a version that includes the fix for this issue. For CA Workload Automation AE versions 11.3.5 through 11.3.6, update to a version that includes the fix for this issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-13656

Affected Products

Ca Client Automation

Ca Common Services Dia

Ca Workload Automation Ae

References · 6

• https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13656 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13656 · Vendor Advisory
• https://seclists.org/bugtraq/2019/Sep/14 · Note
• http://seclists.org/fulldisclosure/2019/Sep/15 · Note
• http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html · Note