JK Status Manager Information Disclosure

It is possible to obtain an overview of the remote Apache Tomcat Connectors configuration. By accessing this overview page; a remote, unauthenticated attacker can discover a large amount of information about the remote web server, including : - The IP address of the host. - The version of the...

CVE-2019-7392

An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration...

PT-2019-18576

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 3.x Description The issue is related to an improper authentication mechanism in the Web-UI jk-manager and jk-status components, allowing a remote attacker to obtain sensitive information or modify the...

CVE-2019-7392: Improper Authentication

An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration...