PT-2012-6259 · Ca · Ca Identityminder

Published 2012-12-26 · Updated 2018-08-13 · CVE-2012-6299

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA IdentityMinder versions r12.0 through CR16 CA IdentityMinder versions r12.5 before SP15 CA IdentityMinder version r12.6 GA

Description The issue allows remote attackers to bypass intended access restrictions. The exact vectors used for the bypass are not specified.

Recommendations For CA IdentityMinder versions r12.0 through CR16, update to a version outside of this range to resolve the issue. For CA IdentityMinder versions r12.5 before SP15, apply SP15 or a later service pack to fix the issue. For CA IdentityMinder version r12.6 GA, consider applying a later patch or update if available, as the GA version is affected.

Fix

Related Identifiers

CVE-2012-6299

Affected Products

Ca Identityminder

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-6299 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BFBA53B61-3A68-4506-9876-F845F6DD8A93%7D · Note