CVE-2019-13658 | BDVDB-2026-123750 Detail
CA Technologies, a Broadcom CompanyCA Network Flow Analysis
Description#
CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-798 Use of Hard-coded Credentials
References#
- https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html
- http://seclists.org/fulldisclosure/2019/Oct/6
- https://seclists.org/bugtraq/2019/Oct/4
- http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.