CVE-2018-13822 Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom project portfolio management | <= 14.3 | No fix listed |
| broadcom project portfolio management | = 14.4 | No fix listed |
| broadcom project portfolio management | = 15.1 | No fix listed |
| broadcom project portfolio management | = 15.2-cumulative_patch_5 | No fix listed |
| broadcom project portfolio management | = 15.3-cumulative_patch_2 | No fix listed |
| ca technologies PPM | = 15.3 and earlier | No fix listed |
References
- 105297 third-party-advisory vdb-entry
- support.ca.com patch vendor-advisory