Beveiligingsadvies

CVE-2024-38499

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-17 05:43:00

Laatst bijgewerkt 2024-12-19 06:03:39

Toegewezen door symantec

CVSS-score 8.8

Status PUBLISHED

Beschrijving

CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further causes the exploitation of stored credentials. This fix doesn't allow a non-admin/non-root user to execute "caf encrypt"/"sd_acmd encrypt" commands.

← Alle CVE's bekijken Bekijk op cve.org ↗