What is CVE-2018-19634?

CVE-2018-19634 is a high-severity vulnerability in Broadcom Service Desk Manager, classified under Improper Access Control. CVSS score: 7.5/10. Published 2019-01-22.

How severe is CVE-2018-19634?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Broadcom Service Desk Manager

CVE-2018-19634

CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.

EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Broadcom Service_desk_manager — versions 17.0
Ca Service_desk_manager — versions 14.1
Ca Technologies Service Desk Manager — versions 17, 14.1

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

vuln@ca.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
vuln@ca.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2018-19634?: CVE-2018-19634 is a high-severity vulnerability in Broadcom Service Desk Manager, classified under Improper Access Control. CVSS score: 7.5/10. Published 2019-01-22.
How severe is CVE-2018-19634?: High severity. CVSS v3 base score is 7.5 out of 10.