PT-2019-13466 · Ca · Ca Network Flow Analysis

Hendrik Van Belleghem · Published 2019-10-02 · Updated 2021-04-09 · CVE-2019-13658

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Network Flow Analysis versions 9.x through 10.0.x

Description The issue allows a remote attacker to execute arbitrary commands and compromise system security due to a default credential vulnerability.

Recommendations For CA Network Flow Analysis versions 9.x through 10.0.x, update the default credentials to secure ones to prevent unauthorized access.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-13658

Affected Products

Ca Network Flow Analysis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-13658 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13658 · Vendor Advisory
• http://seclists.org/fulldisclosure/2019/Oct/6 · Note
• https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html · Note
• http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html · Note
• https://seclists.org/bugtraq/2019/Oct/4 · Note