CVE-2018-9023: Input Validation
Published Jun 18, 2018
·Updated
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the updatecrld script.
Affected Software
1 affected component
Broadcom Privileged Access Manager>=2.0.0<3.0.0
Event History
Jun 18, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9023?
CVE-2018-9023 is considered a high severity vulnerability due to the risk of arbitrary command execution.
2
How do I fix CVE-2018-9023?
To fix CVE-2018-9023, ensure to upgrade CA Privileged Access Manager to version 3.0.0 or later.
3
Who is affected by CVE-2018-9023?
CVE-2018-9023 affects unprivileged users of CA Privileged Access Manager versions 2.0.0 to 2.x.
4
What can an attacker do exploiting CVE-2018-9023?
An attacker exploiting CVE-2018-9023 can execute arbitrary commands on the system via specially crafted arguments.
5
Is there a workaround for CVE-2018-9023?
There are no known workarounds for CVE-2018-9023; updating to a patched version is the recommended solution.