CVE-2019-7394 | BDVDB-2026-117129 Detail
CA Technologies, A Broadcom CompanyCA Strong Authentication
Description#
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-269 Improper Privilege Management
References#
- https://seclists.org/bugtraq/2019/May/66
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html
- http://www.securityfocus.com/bid/108483
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html
- http://seclists.org/fulldisclosure/2019/May/43
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.