CVE-2018-9024

CVE-2018-9024 concerns CA Privileged Access Manager 2.x where an improper authentication flaw allows an attacker to spoof IP addresses in a log file. The CNVD entry attributes the issue to the program failing to perform authentication properly, enabling IP impersonation. Other connected documents...

CVE-2018-9023

CA Privileged Access Manager 2.x contains an input validation vulnerability that allows unprivileged users to execute arbitrary commands by passing specially crafted parameters to the update_crld script. Affected component is CA Privileged Access Manager 2.x (update_crld script). Underlying cause...

CVE-2018-9025

The CVE-2018-9025 entry concerns CA Privileged Access Manager 2.x with a log poisoning flaw caused by faulty input validation. A remote attacker can poison log files by sending specially crafted input. Documented details from multiple sources confirm: (1) affected product is CA Privileged Access ...

CVE-2015-4664

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands...

CVE-2018-9029

CA Privileged Access Manager 2.x contains an improper input validation vulnerability that allows remote attackers to perform SQL injection. The issue stems from input validation weaknesses in the affected component, enabling manipulation of database queries and potential unauthorized data access ...

CVE-2018-9026

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2018-9021

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests...

CVE-2018-9022

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file...

PT-2018-18792

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description The issue is related to weak cryptography used for passwords, which reduces the complexity for password cracking. Recommendations For CA Privileged Access Manager versions 2.x, update to a...

CVE-2018-9029: Improper Neutralization of Special Elements used in an SQL Command

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks...

CVE-2015-4664: Improper Input Validation

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands...

CVE-2018-9025: Improper Input Validation

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input...

CVE-2018-9028: Inadequate Encryption Strength

Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking...

PT-2018-18790

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description A session fixation issue allows remote attackers to hijack user sessions with a specially crafted request. This enables attackers to potentially gain unauthorized access to sensitive...

PT-2018-18788

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description An improper authentication issue allows attackers to spoof IP addresses in a log file. Recommendations For CA Privileged Access Manager versions 2.x, update to a version that includes a fix...

CVE-2018-9026: Session Fixation

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

PT-2018-18785

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.8.2 and earlier Description The issue allows remote attackers to execute arbitrary commands with specially crafted requests due to an authentication bypass. Recommendations For CA Privileged Access Manag...

PT-2018-18787

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description An input validation issue allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update crld script. Recommendations For CA Privileged Access...

PT-2018-18786

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.8.2 and earlier Description The issue allows remote attackers to execute arbitrary code or commands by poisoning a configuration file, which can lead to unauthorized access and control. Recommendations F...

PT-2018-4385

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.4.4.4 and earlier Description An improper input validation issue allows remote attackers to execute arbitrary commands. Recommendations For CA Privileged Access Manager versions 2.4.4.4 and earlier, upda...