NetSight
IP …
medium5.5

CVE-2017-8391

The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during ope…

Impact

The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after operating system installation.

Affected products

VendorProductAffected versions
CaClient Automation
Versions r12.9, r14.0

Weakness classification

CWE-732

References