CVE-2019-7394CWE-269

CVE-2019-7394: vulnerability in CA Strong Authentication

Published · Updated

Follow this CVE+ Monitor CA Risk Authentication+ Monitor CA Strong Authentication

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
Affected products
CA Technologies, A Broadcom Company · CA Risk AuthenticationCA Technologies, A Broadcom Company · CA Strong Authentication
Related CVEs — CA Strong Authentication

In the same product, most dangerous first.

CVE-2019-7393—CVE-2019-7393EPSS 2.3%