CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-19634 – CA Service Desk Manager 14.1 / 17 Authentication Bypass
https://notcve.org/view.php?id=CVE-2018-19634
21 Jan 2019 — CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. CA Service Desk Manager, en sus versiones 14.1 y 17, contiene una vulnerabilidad que puede permitir a un actor malicioso acceder a la información de las encuestas. CA Technologies Support is alerting customers to multiple potential risks with CA Service Desk Manager. Multiple vulnerabilities exist that can allow a remote attacker to access sensitive information or possibly gain addition... • http://www.securityfocus.com/bid/106689 • CWE-284: Improper Access Control •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-19635 – CA Service Desk Manager 14.1 / 17 Authentication Bypass
https://notcve.org/view.php?id=CVE-2018-19635
21 Jan 2019 — CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. CA Service Desk Manager, en sus versiones 14.1 y 17, contiene una vulnerabilidad que puede permitir a un actor malicioso escalar privilegios en la interfaz del usuario. CA Technologies Support is alerting customers to multiple potential risks with CA Service Desk Manager. Multiple vulnerabilities exist that can allow a remote attacker to access sensitive information or p... • http://www.securityfocus.com/bid/106689 • CWE-269: Improper Privilege Management •