Unscored CVE-2014-8246 EUVD-2014-8087GHSA-383p-xxqc-c9c5

Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows r…

Published Dec 16, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
20141216 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
VU#343060 third-party-advisory
20141215 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
1031375 vdb-entry