PT-2018-18791
CVE-2018-9027
·
Published
2018-06-18
·
Updated
2018-08-10
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
CA Privileged Access Manager versions 2.x
Description
A reflected cross-site scripting issue allows remote attackers to execute malicious script with a specially crafted link.
Recommendations
For CA Privileged Access Manager versions 2.x, update to a version that includes a fix for this issue, as using a specially crafted link can lead to the execution of malicious scripts.
Found an issue in the description? Have something to add? Feel free to write us 👾