← CVE Intelligence

CVE-2024-38499

Improper Privilege Management Vulnerability in CA Client Automation 14.5 PUBLISHED

Description (CNA)

CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further causes the exploitation of stored credentials. This fix doesn't allow a non-admin/non-root user to execute "caf encrypt"/"sd_acmd encrypt" commands.

Affected (CNA)

Vendor / productVersions
Broadcom / CA Client Automation (ITCM)affected 14.5 CU7

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.