PT-2010-2928 · Ca · Ca Xosoft

Published 2010-04-07 · Updated 2018-10-10 · CVE-2010-1222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CA XOsoft version r12.5

Description The issue is related to improper authentication, allowing remote attackers to obtain potentially sensitive information. This can be achieved via a SOAP request.

Recommendations For CA XOsoft version r12.5, consider restricting access to the SOAP interface until a proper fix is available. As a temporary workaround, review and strengthen authentication mechanisms to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2010-1222

Affected Products

Ca Xosoft

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-1222 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869 · Vendor Advisory
• http://securityfocus.com/bid/39249 · Patch
• http://securityfocus.com/archive/1/510564/100/0/threaded · Note