PT-2020-10179 · Ca · Ca Automic Sysload

Published 2020-01-08 · Updated 2020-01-17 · CVE-2019-19518

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Automic Sysload versions 5.6.0 through 6.1.2

Description The issue is related to a lack of authentication on the File Server port, which potentially allows remote attackers to execute arbitrary commands.

Recommendations For versions 5.6.0 through 6.1.2, consider restricting access to the File Server port as a temporary workaround until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-19518

Affected Products

Ca Automic Sysload

References · 3

• https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191210-01-security-notice-for-ca-automic-sysload.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19518 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19518 · Vendor Advisory