Description (CNA)
CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / CA Network Flow Analysis (NFA) | affected 9.3.8, 9.5, 10.0, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 21.2.1 |
CWE
No CWE identifiers supplied.
References
- https://support.broadcom.com/external/content/security-advisories/CA20211201-01-Security-Notice-for-CA-Network-Flow-Analysis/19689
- http://seclists.org/fulldisclosure/2021/Dec/0
ADP enrichment
No English description supplied.