CVE-2019-7394

A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.

• CWE-269
• CWE-269

• http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/43Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108483Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/66Mailing List, Third Party Advisory
• https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.htmlVendor Advisory
• http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/May/43Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108483Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/66Mailing List, Third Party Advisory
• https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.htmlVendor Advisory

Published

May 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7393A UI redress vulnerability in the administrative user interf…4.3
• CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in Read…7.5
• CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.…7.5
• CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7399Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle att…
• CVE-2019-7400Rukovoditel before 2.4.1 allows XSS.6.1