ByteOS Network

NVD Vulnerability Details :

CVE-2018-13821

Analyzed

Source-vuln@ca.com

Published At-30 Aug, 2018 | 14:29

Updated At-05 Nov, 2018 | 21:22

A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

CA Technologies (Broadcom Inc.)

>>unified_infrastructure_management>>8.4.7

cpe:2.3:a:ca:unified_infrastructure_management:8.4.7:*:*:*:*:*:*:*

CA Technologies (Broadcom Inc.)

>>unified_infrastructure_management>>8.5

cpe:2.3:a:ca:unified_infrastructure_management:8.5:*:*:*:*:*:*:*

CA Technologies (Broadcom Inc.)

>>unified_infrastructure_management>>8.5.1

cpe:2.3:a:ca:unified_infrastructure_management:8.5.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105199	vuln@ca.com	Third Party Advisory VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-02--security-notice-for-ca-unified-infrastructure-mgt.html	vuln@ca.com	Mitigation Vendor Advisory Patch

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History