CA Cloud Service Management Bugs Let Remote Users Access Data, Deny Service, and Conduct Cross-Site Request Forgery Attacks
SecurityTracker Alert ID: 1031214|
SecurityTracker URL: http://securitytracker.com/id/1031214
CVE-2014-8471, CVE-2014-8472, CVE-2014-8473, CVE-2014-8474
(Links to External Site)
Date: Nov 15 2014
Denial of service via network, Disclosure of user information, Execution of arbitrary code via network, Modification of user information, User access via network|
Fix Available: Yes Vendor Confirmed: Yes |
Version(s): Spring 2014 Release|
Several vulnerabilities were reported in CA Cloud Service Management. A remote user can gain access to data on the target system. A remote user can cause denial of service conditions. A remote user can conduct cross-site request forgery attacks.|
A remote user with access to the target user's environment can conduct a replay attack with unspecified impact [CVE-2014-8471].
A remote user can exploit a flaw in Identity Provider authentication token verification with unspecified impact [CVE-2014-8472].
A remote user can conduct cross-site request forgery attacks to take actions on the target site acting as the target user [CVE-2014-8473].
A remote user can supply XML data with a specially crafted XML external entity reference to access potentially sensitive information or cause denial of service conditions on the target site [CVE-2014-8474].
Vladislav Mladenov, Julian Krautwald, Florian Feldmann, and Christian Mainka (@CheariX) of Horst Goertz Institute for IT-Security reported these vulnerabilities.
A remote user can gain access to data on the target system.|
A remote user can cause denial of service conditions.
A remote user can take actions on the target site acting as the target user.
The vendor has issued a fix (Summer 2014 Upgrade).|
The vendor's advisory is available at:
Vendor URL: www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx (Links to External Site)
Access control error, Input validation error|
Source Message Contents
Subject: CA20141103-01: Security Notice for CA Cloud Service Management|
-----BEGIN PGP SIGNED MESSAGE-----
CA20141103-01: Security Notice for CA Cloud Service Management
Issued: November 3, 2014
CA Technologies Support is alerting customers to four resolved
vulnerabilities with CA Cloud Service Management. Four vulnerabilities
existed that could potentially allow a remote attacker to access user
sessions, gain sensitive information, or cause a denial of service
condition. CA Technologies fixed these vulnerabilities in all
production environments as part of the Cloud Service Management
Summer 2014 Upgrade.
The first vulnerability, CVE-2014-8471, concerned a replay attack. An
attacker would have needed access to a user's environment in order to
carry out this attack.
The second vulnerability, CVE-2014-8472, involved Identity Provider
authentication token verification. An attacker would have needed to
manipulate a user in order to exploit this vulnerability.
The third vulnerability, CVE-2014-8473, is a cross-site request
forgery vulnerability. An attacker would have needed to manipulate a
user in order to exploit this vulnerability.
The fourth vulnerability, CVE-2014-8474, is an XML external entity
vulnerability that could have allowed an attacker to potentially gain
sensitive information or cause a denial of service condition.
Note: These vulnerabilities no longer pose any risk to customers.
CA Cloud Service Management Spring release
CA Cloud Service Management Summer 2014 Upgrade
CA Technologies addressed these vulnerabilities with the Cloud
Service Management Summer 2014 Upgrade.
CVE-2014-8471 - CSM replay
CVE-2014-8472 - CSM Identity Provider
CVE-2014-8473 - CSM CSRF
CVE-2014-8474 - CSM XXE
CVE-2014-8471, CVE-2014-8472, CVE-2014-8473, CVE-2014-8474 -
Vladislav Mladenov, Julian Krautwald, Florian Feldmann and Christian
Mainka (@CheariX), Security researchers at Horst G=F6rtz Institute for
IT-Security / Chair for Network and Data Security
Version 1.0: Initial Release
If additional information is required, please contact CA Technologies
Support at https://support.ca.com/
If you discover a vulnerability in CA Technologies products, please
report your findings to the CA Technologies Product Vulnerability
Response Team at email@example.com
Vulnerability Response Director
CA Technologies Product Vulnerability Response Team
Copyright (c) 2014 CA. All Rights Reserved. One CA Plaza, Islandia,
N.Y. 11749. All other trademarks, trade names, service marks, and
logos referenced herein belong to their respective companies.
-----BEGIN PGP SIGNATURE-----
Version: Encryption Desktop 10.3.2 (Build 15238)
-----END PGP SIGNATURE-----