medium5.3
CVE-2018-14597
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that…
Impact
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Ca Identity Governance | from 14.0 through 14.2 Version 12.6 |
| Broadcom | Ca Identity Suite Virtual Appliance | from 14.0 through 14.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105688
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html
- http://www.securityfocus.com/bid/105688
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html