PT-2011-3269 · Ca · Ca Total Defense

Andrea Micalizzi + 1 · Published 2011-04-13 · Updated 2021-04-12 · CVE-2011-1655

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA Total Defense versions prior to r12 SE2

Description The issue allows remote attackers to obtain database credentials by sniffing the network, due to the management.asmx module in the Management Web Service sending a cleartext response to getDBConfigSettings requests. This could subsequently enable the execution of arbitrary code.

Recommendations For versions prior to r12 SE2, update to r12 SE2 or later to resolve the issue. As a temporary workaround, consider restricting access to the management.asmx module to minimize the risk of exploitation. Avoid using the getDBConfigSettings request in the affected API endpoint until the issue is resolved.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2011-1655

ZDI-11-127

Affected Products

Ca Total Defense

References · 11

• http://vupen.com/english/advisories/2011/0977 · Vendor Advisory
• http://secunia.com/advisories/44097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1655 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-127 · Security Note
• http://securitytracker.com/id?1025353 · Note
• http://securityfocus.com/bid/47356 · Note
• http://securityfocus.com/archive/1/517494/100/0/threaded · Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D · Note
• http://securityfocus.com/archive/1/517492/100/0/threaded · Note
• http://zerodayinitiative.com/advisories/ZDI-11-127 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66727 · Note