CVE-2018-9025 - An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input

Back Back to CVE browser

HIGH

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input

Published Jun 18, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.39%

Description

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.

Affected products

Vendor CA Technologies Product CA Privileged Access Manager Default
n/a
- Version
  2.x
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

CA Technologies

CA Privileged Access Manager

n/a

Version	Status	Constraints
2.x	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

http://www.securityfocus.com/bid/104496
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/104496		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ca

Published Jun 18, 2018

Updated Sep 16, 2024

Reserved Mar 26, 2018

Link CVE-2018-9025

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-9025

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-9025