CVE-2022-22689

CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands.
Configurations

Configuration 1

cpe:2.3:a:broadcom:ca_harvest_software_change_manager:13.0.4:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:ca_harvest_software_change_manager:14.0.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:ca_harvest_software_change_manager:14.0.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:ca_harvest_software_change_manager:13.0.3:*:*:*:*:*:*:*

Information

Published : 2022-02-04 11:15

Updated : 2022-02-10 06:54


NVD link : CVE-2022-22689

Mitre link : CVE-2022-22689

Products Affected
No products.
CWE
CWE-1236

Improper Neutralization of Formula Elements in a CSV File