Vulnerability · Published Dec 2, 2021 · Assigned by ca
CVE-2021-44050
Medium 6.5
In plain English
A medium-severity security flaw in CA Network Flow Analysis (NFA). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.9%top 40.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | CA Network Flow Analysis (NFA) | 9.3.8, 9.5, 10.0, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 21.2.1 |
References
- https://support.broadcom.com/external/content/security-advisories/CA20211201-01-Security-Notice-for-CA-Network-Flow-Analysis/19689 x_refsource_MISC
- 20211203 CA20211201-01: Security Notice for CA Network Flow Analysis mailing-list, x_refsource_FULLDISC