CVE-2022-33739

CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system...

CVE-2022-33756

CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data...

CVE-2022-33751

CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data...

Input validation

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

Input validation

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

Authentication flaw

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

Input validation

CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users...

Spoofing

CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system...

Design/Logic Flaw

CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data...

CVE-2022-33739

CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system...

CVE-2022-33739

CA Clarity 15.8 and earlier and 15.9.0 are affected by an insecure XML parsing vulnerability. A remote attacker could potentially view the contents of any file on the system. The issue is documented across multiple sources (NVD, Red Hat, CNNVD) and relates specifically to CA Clarity’s XML parsing...

CVE-2022-33756

CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data...

CVE-2022-33756

CVE-2022-33756 affects Broadcom/CA Automic Automation: versions 12.2 and 12.3 of the AutomationEngine are reported to contain an entropy weakness that could allow a remote attacker to potentially access sensitive data. Connected sources (NVD, Red Hat) describe the issue similarly and do not provi...

CVE-2022-33755

CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users...

CVE-2022-33755

CA Automic Automation versions 12.2–12.3 are affected by an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to enumerate users. The PT-2022-21866 entry notes the issue stems from input handling in the Automic Agent and provides a workaround: restrict ...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. The affected product/subsystem is Automic Automation ( Broadcom ). Root cause: input validation weakness in the...

CVE-2022-33753

The CVE-2022-33753 issue affects Broadcom CA Automic Automation versions 12.2 and 12.3, with an insecure file creation and handling vulnerability in the Automic agent that could allow a user to elevate privileges. Supported by PT-2022-21864, this is tied to the Automic agent’s file handling logic...

CVE-2022-33753

CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges...

CVE-2022-33752

CA Automic Automation 12.2 and 12.3 contain a vulnerability in the Automic agent due to insufficient input validation, potentially allowing a remote attacker to execute arbitrary code. Affected products are Broadcom CA Automic Automation (Automic agent) versions 12.2/12.3. The root cause is input...