CVE-2019-19231

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-12-20 · updated 2026-06-17
Weakness: CWE-65

Description

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.

Affected products

CA Technologies, Broadcom Company CA Client Automation: 14.0, 14.1, 14.2, 14.3

References

http://packetstormsecurity.com/files/155758/CA-Client-Automation-14.x-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2020/Jan/5
https://seclists.org/bugtraq/2019/Dec/41
https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html
http://packetstormsecurity.com/files/155758/CA-Client-Automation-14.x-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2020/Jan/5
https://seclists.org/bugtraq/2019/Dec/41
https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html

Get alerted when CVE-2019-19231 or the next vulnerability affects your stack