PT-2010-2928 · Ca · Ca Xosoft

Publicado 2010-04-07 · Atualizado 2018-10-10 · CVE-2010-1222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CA XOsoft version r12.5

Description The issue is related to improper authentication, allowing remote attackers to obtain potentially sensitive information. This can be achieved via a SOAP request.

Recommendations For CA XOsoft version r12.5, consider restricting access to the SOAP interface until a proper fix is available. As a temporary workaround, review and strengthen authentication mechanisms to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2010-1222

Produtos afetados

Ca Xosoft

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-1222 · Nota de Segurança
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869 · Aviso do Fabricante
• http://securityfocus.com/archive/1/510564/100/0/threaded · Nota
• http://securityfocus.com/bid/39249 · Correção