9.8
CVE-2018-13821
- EPSS 2.68%
- Veröffentlicht 30.08.2018 14:29:00
- Zuletzt bearbeitet 21.11.2024 03:48:09
- Quelle vuln@ca.com
- CVE-Watchlists
- Unerledigt
LoginA lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ca ≫ Unified Infrastructure Management Version8.4.7
Ca ≫ Unified Infrastructure Management Version8.5
Ca ≫ Unified Infrastructure Management Version8.5.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.68% | 0.839 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://www.securityfocus.com/bid/105199
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-02--security-notice-for-ca-unified-infrastructure-mgt.html