CVE-2019-7394
- State
- Published
- Severity
- Not scored
- Published
- May 28, 2019
- Updated
- Sep 17, 2024
- Reserved
- Feb 4, 2019
Description
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
Scores
The record has no CVSS score.
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
CA Strong AuthenticationCA Technologies, A Broadcom Company |
|
CA Risk AuthenticationCA Technologies, A Broadcom Company |
|
References
- 20190527 CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authenticationmailing-list
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html
- 108483vdb-entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html
- 20190529 CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authenticationmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.