CVEDB API

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.0%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-9024

Broadcom » Privileged Access Manager » Version: 2.0.0

cpe:2.3:a:broadcom:privileged_access_manager:2.0.0
Broadcom » Privileged Access Manager » Version: 2.4.4.4

cpe:2.3:a:broadcom:privileged_access_manager:2.4.4.4
Broadcom » Privileged Access Manager » Version: 2.7.0

cpe:2.3:a:broadcom:privileged_access_manager:2.7.0
Broadcom » Privileged Access Manager » Version: 2.8.0

cpe:2.3:a:broadcom:privileged_access_manager:2.8.0
Broadcom » Privileged Access Manager » Version: 2.8.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.1
Broadcom » Privileged Access Manager » Version: 2.8.2

cpe:2.3:a:broadcom:privileged_access_manager:2.8.2
Broadcom » Privileged Access Manager » Version: 2.8.3

cpe:2.3:a:broadcom:privileged_access_manager:2.8.3
Broadcom » Privileged Access Manager » Version: 2.8.4.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.4.1