CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2021/Dec/0 | Mailing List Third Party Advisory |
https://support.broadcom.com/external/content/security-advisories/CA20211201-01-Security-Notice-for-CA-Network-Flow-Analysis/19689 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ca
Published: 2021-12-02T18:18:41
Updated: 2021-12-03T18:06:06
Reserved: 2021-11-19T00:00:00
Link: CVE-2021-44050
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-12-02T19:15:08.547
Modified: 2021-12-06T17:20:21.577
Link: CVE-2021-44050
JSON object: View
Redhat Information
No data.
CWE