Description
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CA Technologies, A Broadcom Company CA Strong Authentication
9.0.xaffected8.2.xaffected8.1.xaffected8.0.xaffected7.1.xaffected
CA Technologies, A Broadcom Company CA Risk Authentication
9.0.xaffected8.2.xaffected8.1.xaffected8.0.xaffected3.1.xaffected
References
- https://seclists.org/bugtraq/2019/May/66 ↗
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html ↗
- http://www.securityfocus.com/bid/108483 ↗
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html ↗
- http://seclists.org/fulldisclosure/2019/May/43 ↗