CVE Vulnerabilities

CVE-2022-33756

Insufficient Entropy

Published: Jun 16, 2022 | Modified: Jun 27, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data.

Weakness

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Affected Software

Name Vendor Start Version End Version
Ca_automic_automation Broadcom 12.2 (including) 12.2 (including)
Ca_automic_automation Broadcom 12.3 (including) 12.3 (including)

Potential Mitigations

References