TUCoPS :: Security App Flaws

TUCoPS :: Security App Flaws :: c07-2595.htm
CA eTrust Admin Privilege Escalation Vulnerability
: CA eTrust Admin Privilege Escalation Vulnerability : CA eTrust Admin Privilege Escalation Vulnerability
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