CVE-2017-9393 CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca identity manager | = 12.6-ga | No fix listed |
| ca identity manager | = 12.6-sp1 | No fix listed |
| ca identity manager | = 12.6-sp2 | No fix listed |
| ca identity manager | = 12.6-sp3 | No fix listed |
| ca identity manager | = 12.6-sp4 | No fix listed |
| ca identity manager | = 12.6-sp5 | No fix listed |
| ca identity manager | = 12.6-sp6 | No fix listed |
| ca identity manager | = 12.6-sp7 | No fix listed |
| ca identity manager | = 12.6-sp8 | No fix listed |
| ca identity manager | = 14.0 | No fix listed |
| ca identity manager | = 14.1 | No fix listed |
| ca identity manager virtual appliance | = 14.0 | No fix listed |
| ca identity manager virtual appliance | = 14.1 | No fix listed |
| ca technologies Identity Manager | = 12.6 through 12.6 SP8 | No fix listed |
| ca technologies Identity Manager | = 14.0 | No fix listed |
| ca technologies Identity Manager | = 14.1 | No fix listed |
References
- 100956 third-party-advisory vdb-entry
- support.ca.com vendor-advisory