Description
A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CA Technologies, A Broadcom Company CA Strong Authentication
9.0.xaffected8.2.xaffected8.1.xaffected8.0.xaffected7.1.xaffected
CA Technologies, A Broadcom Company CA Risk Authentication
9.0.xaffected8.2.xaffected8.1.xaffected8.0.xaffected3.1.xaffected
References
- https://seclists.org/bugtraq/2019/May/66 ↗
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html ↗
- http://www.securityfocus.com/bid/108483 ↗
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html ↗
- http://seclists.org/fulldisclosure/2019/May/43 ↗