PT-2024-9958 · Ca · Ca Client Automation
Matthias Deeg
·
Published
2024-06-18
·
Updated
2024-12-19
·
CVE-2024-38499
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
CA Client Automation (ITCM) (affected versions not specified)
Description:
The issue is related to insecure privilege management in the CA Client Automation software, which allows non-admin or non-root users to encrypt strings using the CAF CLI and SD ACMD CLI. This could enable a non-admin user to access critical encryption keys, potentially leading to the exploitation of stored credentials. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations:
As a temporary workaround, consider disabling the
caf encrypt and sd acmd encrypt commands until a patch is available. Restrict access to the CAF CLI and SD ACMD CLI to minimize the risk of exploitation. Avoid using the caf encrypt and sd acmd encrypt commands in the affected software until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Improper Privilege Management
Incorrect Default Permissions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ca Client Automation