CVEDB API

Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.6%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-9028

Broadcom » Privileged Access Manager » Version: 2.0.0

cpe:2.3:a:broadcom:privileged_access_manager:2.0.0
Broadcom » Privileged Access Manager » Version: 2.4.4.4

cpe:2.3:a:broadcom:privileged_access_manager:2.4.4.4
Broadcom » Privileged Access Manager » Version: 2.7.0

cpe:2.3:a:broadcom:privileged_access_manager:2.7.0
Broadcom » Privileged Access Manager » Version: 2.8.0

cpe:2.3:a:broadcom:privileged_access_manager:2.8.0
Broadcom » Privileged Access Manager » Version: 2.8.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.1
Broadcom » Privileged Access Manager » Version: 2.8.2

cpe:2.3:a:broadcom:privileged_access_manager:2.8.2
Broadcom » Privileged Access Manager » Version: 2.8.3

cpe:2.3:a:broadcom:privileged_access_manager:2.8.3
Broadcom » Privileged Access Manager » Version: 2.8.4.1

cpe:2.3:a:broadcom:privileged_access_manager:2.8.4.1