PT-2014-8545
CVE-2014-8472
·
تاريخ النشر
2014-11-04
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
CA Cloud Service Management (CSM) versions prior to Summer 2014
Description
The issue allows user-assisted remote attackers to bypass intended access restrictions. This is due to the improper verification of authentication tokens from an Identity Provider.
Recommendations
For versions prior to Summer 2014, update to a version released after Summer 2014 to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾