CVE-2015-4664

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands...

CVE-2018-9022

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file...

CVE-2015-4664

CVE-2015-4664 affects CA Privileged Access Manager (PAM) 2.4.4.4 and earlier. The vulnerability is an improper input validation that enables an unauthenticated attacker to perform command injection through the login interface, potentially executing arbitrary commands. The OpenVAS/Modzero/OpenVAS ...

CVE-2018-9029

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks...

CVE-2018-9028

Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking...

PT-2018-4385

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.4.4.4 and earlier Description An improper input validation issue allows remote attackers to execute arbitrary commands. Recommendations For CA Privileged Access Manager versions 2.4.4.4 and earlier, upda...

PT-2018-18790

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description A session fixation issue allows remote attackers to hijack user sessions with a specially crafted request. This enables attackers to potentially gain unauthorized access to sensitive...

PT-2018-18788

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description An improper authentication issue allows attackers to spoof IP addresses in a log file. Recommendations For CA Privileged Access Manager versions 2.x, update to a version that includes a fix...

PT-2018-18785

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.8.2 and earlier Description The issue allows remote attackers to execute arbitrary commands with specially crafted requests due to an authentication bypass. Recommendations For CA Privileged Access Manag...

CVE-2018-9027: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link...

CVE-2018-9029: Improper Neutralization of Special Elements used in an SQL Command

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks...

CVE-2018-9026: Session Fixation

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2015-4664: Improper Input Validation

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands...

CVE-2018-9021: Improper Privilege Management

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests...

CVE-2018-9023: Improper Input Validation

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the updatecrld script...

CVE-2018-9025: Improper Input Validation

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input...

CVE-2018-9022: Improper Privilege Management

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file...

PT-2018-18786

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.8.2 and earlier Description The issue allows remote attackers to execute arbitrary code or commands by poisoning a configuration file, which can lead to unauthorized access and control. Recommendations F...

PT-2018-18789

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description The issue is related to an input validation vulnerability that allows remote attackers to poison log files with specially crafted input. Recommendations For CA Privileged Access Manager...

PT-2018-18791

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description A reflected cross-site scripting issue allows remote attackers to execute malicious script with a specially crafted link. Recommendations For CA Privileged Access Manager versions 2.x, upda...