CVE-2018-9022

CVE-2018-9022: vulnerability in CA Privileged Access Manager

Published · Updated

Follow this CVE+ Monitor CA Privileged Access Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 13%
from disclosure to weapon535 days
Published on NVDJun 18
1st PoC+535d
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.
Affected products
CA Technologies · CA Privileged Access Manager
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — CA Privileged Access Manager

In the same product, most dangerous first.

CVE-2015-4664—CVE-2015-4664EPSS 20.2%CVE-2018-9021—CVE-2018-9021EPSS 9.4%CVE-2018-9023—CVE-2018-9023EPSS 1.8%CVE-2018-9029—CVE-2018-9029EPSS 1.7%CVE-2018-9025—CVE-2018-9025EPSS 1.3%CVE-2018-9026—CVE-2018-9026EPSS 1.3%