PT-2017-18891 · Ca · Identity Manager

Publicado 2017-09-22 · Atualizado 2017-10-05 · CVE-2017-9393

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CA Identity Manager versions r12.6 to r12.6 SP8 CA Identity Manager versions 14.0 CA Identity Manager version 14.1

Description The issue allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Recommendations For CA Identity Manager versions r12.6 to r12.6 SP8, update to a version that includes a fix for this issue. For CA Identity Manager versions 14.0, update to a version that includes a fix for this issue. For CA Identity Manager version 14.1, update to a version that includes a fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-9393

Produtos afetados

Identity Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-9393 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9393 · Aviso do Fabricante
• http://securityfocus.com/bid/100956 · Nota
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html · Aviso do Fabricante