https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:44:41.812512+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-38499 CVE-2024-38499 — Improper Privilege Management Vulnerability in CA Client Automation 14.5 2026-10-07T05:44:41.827680+00:00

Affected: Broadcom CA Client Automation (ITCM)

CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further causes the exploitation of stored credentials. This fix doesn't allow a non-admin/non-root user to execute "caf encrypt"/"sd_acmd encrypt" commands.