Critical · 9.8 CVE-2019-19230 EUVD-2019-8856GHSA-6w3p-7vr4-75hx

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remo…

Published Dec 9, 2019 · Updated Sep 17, 2024 · Assigned by ca

Vendor: CA Technologies, A Broadcom Company Product: CA Release Automation

Description

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
CA Technologies, A Broadcom Company	CA Release Automation	6.6	—

References

https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191209-01-security-notice-for-ca-nolio-release-automation.html?r=2
20191210 CA20191209-01: Security Notice for CA Nolio (Release Automation) mailing-list
20191210 CA20191209-01: Security Notice for CA Nolio (Release Automation) mailing-list
http://packetstormsecurity.com/files/155631/CA-Nolio-6.6-Arbitrary-Code-Execution.html