CVE-2019-13656

Опубликовано: 06 сент. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code.

Ссылки

http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Sep/15
Mailing List
Third Party Advisory
https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html
Vendor Advisory
https://seclists.org/bugtraq/2019/Sep/14
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Sep/15
Mailing List
Third Party Advisory
https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html
Vendor Advisory
https://seclists.org/bugtraq/2019/Sep/14
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:ca_client_automation:14.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ca_workload_automation_ae:11.3.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ca_workload_automation_ae:11.3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.14551

Средний

9.8 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284

NVD-CWE-noinfo

Связанные уязвимости

GHSA-wc4j-6w9r-crwf

github

больше 3 лет назад

An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code.

EPSS

Процентиль: 94%

0.14551

Средний

9.8 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284

NVD-CWE-noinfo