Vulnerability Description
A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ca | Risk Authentication | >= 8.0, <= 8.2.1 |
| Ca | Strong Authentication | >= 8.0, <= 8.2.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-PrivilThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/May/43Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/108483Third Party AdvisoryVDB Entry
- https://seclists.org/bugtraq/2019/May/66Mailing ListThird Party Advisory
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CVendor Advisory
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-PrivilThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/May/43Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/108483Third Party AdvisoryVDB Entry
- https://seclists.org/bugtraq/2019/May/66Mailing ListThird Party Advisory
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CVendor Advisory
FAQ
What is CVE-2019-7393?
CVE-2019-7393 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1...
How severe is CVE-2019-7393?
CVE-2019-7393 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-7393?
Check the references section above for vendor advisories and patch information. Affected products include: Ca Risk Authentication, Ca Strong Authentication.