CVE-2019-7393

A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.

• CWE-1021
• CWE-1021

• http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/43Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108483Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/66Mailing List, Third Party Advisory
• https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.htmlVendor Advisory
• http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/43Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108483Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/66Mailing List, Third Party Advisory
• https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.htmlVendor Advisory

Published

May 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7387A local file inclusion vulnerability exists in the web inter…
• CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7394A privilege escalation vulnerability in the administrative u…8.8
• CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in Read…7.5
• CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.…7.5
• CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7399Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle att…