CVE-2018-9023

CWE-20 — Improper Input Validation3 documents3 sources
Severity
8.8HIGH
EPSS
0.4%
top 36.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Privileged Access ManagerCA Technologies CA Privileged Access Manager
Timeline
PublishedJun 18
Latest updateMay 13

Description

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-w9v7-2mp6-x5vq: An input validation vulnerability in CA Privileged Access Manager 2↗2022-05-13
▶
CVEList
CVE-2018-9023: An input validation vulnerability in CA Privileged Access Manager 2↗2018-06-18
▶