Unscored CVE-2018-9023 EUVD-2018-20627GHSA-w9v7-2mp6-x5vq

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing sp…

Published Jun 18, 2018 · Updated Sep 16, 2024 · Assigned by ca

Vendor: CA Technologies Product: CA Privileged Access Manager

Description

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.

Affected products

Vendor	Product	Affected	Fixed
CA Technologies	CA Privileged Access Manager	2.x	—

References

104496 vdb-entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html