An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7392
Reference (s):
- BID:107040
- URL: http://www.securityfocus.com/bid/107040
- https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190212-01–security-notice-for-ca-privileged-access-manager.html