PT-2017-18891
CVE-2017-9393
·
Publicado
2017-09-22
·
Atualizado
2017-10-05
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CA Identity Manager versions r12.6 to r12.6 SP8
CA Identity Manager versions 14.0
CA Identity Manager version 14.1
Description
The issue allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
Recommendations
For CA Identity Manager versions r12.6 to r12.6 SP8, update to a version that includes a fix for this issue.
For CA Identity Manager versions 14.0, update to a version that includes a fix for this issue.
For CA Identity Manager version 14.1, update to a version that includes a fix for this issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾