Arbitrary Command Execution Vulnerability in CA Privileged Access Manager 2.x

CVE-2018-9023 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.

Learn more about our User Device Pen Test.