PT-2018-12202
CVE-2018-13819
·
Published
2018-08-30
·
Updated
2018-10-19
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
CA Unified Infrastructure Management versions 8.4.7 through 8.5.1
Description
A hardcoded secret key in the software allows attackers to access sensitive information.
Recommendations
For CA Unified Infrastructure Management versions 8.4.7 through 8.5.1, update to a version that does not contain the hardcoded secret key to prevent unauthorized access to sensitive information.
Found an issue in the description? Have something to add? Feel free to write us 👾