Vulnerability Description
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ca | Risk Authentication | >= 8.0, <= 8.2.1 |
| Ca | Strong Authentication | >= 8.0, <= 8.2.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-PrivilThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/May/43Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/108483Third Party AdvisoryVDB Entry
- https://seclists.org/bugtraq/2019/May/66Mailing ListThird Party Advisory
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CVendor Advisory
- http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-PrivilThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/May/43Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/108483Third Party AdvisoryVDB Entry
- https://seclists.org/bugtraq/2019/May/66Mailing ListThird Party Advisory
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CVendor Advisory
FAQ
What is CVE-2019-7394?
CVE-2019-7394 is a vulnerability with a CVSS score of 8.8 (HIGH). A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, ...
How severe is CVE-2019-7394?
CVE-2019-7394 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-7394?
Check the references section above for vendor advisories and patch information. Affected products include: Ca Risk Authentication, Ca Strong Authentication.