CVE-2022-22689 | BDVDB-2026-169239 Detail

CA Harvest Software Change Manager

Description#

CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-1236 Improper Neutralization of Formula Elements in a CSV File

References#

https://support.broadcom.com/security-advisory/content/security-advisories/CA20220203-01-Security-Notice-for-CA-Harvest-Software-Change-Manager/ESDSA20297

Exploit#

No public exploit known

History#

Version 12022-02-04Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.