CVE-2022-33753 - OpenCVE

CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:S/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Broadcom	Ca Automic Automation

Configuration 1 [-]

OR	cpe:2.3:a:broadcom:ca_automic_automation:12.2:::::::*
	cpe:2.3:a:broadcom:ca_automic_automation:12.3:::::::*

References

Link	Resource
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ca

Published: 2022-06-16T21:21:27

Updated: 2022-06-16T21:21:27

Reserved: 2022-06-15T00:00:00

Link: CVE-2022-33753

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-06-16T22:15:08.190

Modified: 2023-08-08T14:21:49.707

Link: CVE-2022-33753

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:ca_automic_automation:12.2:*:*:*:*:*:*:*", "matchCriteriaId": "22D1C010-0893-4544-BE4A-BC913D5A794D", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:ca_automic_automation:12.3:*:*:*:*:*:*:*", "matchCriteriaId": "C4094ECD-DD2B-4D98-B840-090E48FDFB64", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges."}, {"lang": "es", "value": "CA Automic Automation versiones 12.2 y 12.3, contienen una vulnerabilidad de creaci\u00f3n y manejo de archivos no segura en el agente de Automic que podr\u00eda permitir a un usuario elevar potencialmente sus privilegios"}], "id": "CVE-2022-33753", "lastModified": "2023-08-08T14:21:49.707", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-06-16T22:15:08.190", "references": [{"source": "vuln@ca.com", "tags": ["Vendor Advisory"], "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629"}], "sourceIdentifier": "vuln@ca.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}