Description
CA eTrust Security Command Center contains a vulnerability that can allow a local attacker to read and delete arbitrary files. The vulnerability is due to improper validation of temporary file location reported by getadhochtml function. An attacker can exploit this vulnerability to read and delete arbitrary files from the host server with permissions of the service account.
Back to top
Affected Technologies
Computer Associates: CA eTrust Security Command Center - Server r8
Computer Associates: CA eTrust Security Command Center r8 SP1 CR1
Computer Associates: CA eTrust Security Command Center r8 SP1 CR2
Back to top