CVE-2012-6299 Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors.

HighCVSS 10.0 EPSS 2.8%

Published: 2012-12-26 22:00
Updated: 2026-06-17 02:47
Exploit status: No public exploit known

Description

Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors.

Affected products

Product	Affected versions	Fixed in
ca identityminder	<= r12.0	No fix listed
ca identityminder	= r12.5-sp1	No fix listed
ca identityminder	= r12.5-sp14	No fix listed
ca identityminder	= r12.6-ga	No fix listed

References

support.ca.com

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.77% (percentile 86.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.