CVE-2022-33753

CWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
8.8HIGH
EPSS
0.5%
top 33.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Broadcom CA Automic Automation
Timeline
PublishedJun 16
Latest updateJun 17

Description

CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ca_automic_automation12.2, 12.3

🔴Vulnerability Details

2
GHSA
GHSA-xv9f-6xv6-jrw4: CA Automic Automation 12↗2022-06-17
▶
CVEList
CVE-2022-33753: CA Automic Automation 12↗2022-06-16
▶
CVE-2022-33753 (HIGH CVSS 8.8) | CA Automic Automation 12.2 and 12.3 | cvebase.io