CVE-2019-7394

2019-05-2819:29:07

CWE-269

[email protected]

web.nvd.nist.gov

120

cve-2019-7394

ca technologies

privilege escalation

administrative interface

risk authentication

nvd

8.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

JSON

CPENameOperatorVersion
ca:risk_authenticationca risk authenticationle8.2.1
ca:risk_authenticationca risk authenticationeq3.1
ca:risk_authenticationca risk authenticationeq9.0
ca:strong_authenticationca strong authenticationle8.2.1
ca:strong_authenticationca strong authenticationeq7.1
ca:strong_authenticationca strong authenticationeq9.0

CPE	Name	Operator	Version
ca:risk_authentication	ca risk authentication	le	8.2.1
ca:risk_authentication	ca risk authentication	eq	3.1
ca:risk_authentication	ca risk authentication	eq	9.0
ca:strong_authentication	ca strong authentication	le	8.2.1
ca:strong_authentication	ca strong authentication	eq	7.1
ca:strong_authentication	ca strong authentication	eq	9.0

References

packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html

seclists.org/fulldisclosure/2019/May/43

www.securityfocus.com/bid/108483

seclists.org/bugtraq/2019/May/66

support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html