Lucene search

[email protected]NVD:CVE-2018-14597

HistoryOct 17, 2018 - 9:49 p.m.

CVE-2018-14597

2018-10-1721:49:52

CWE-200

CWE-203

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.

Affected configurations

Nvd

Node

broadcomca_identity_governanceRange14.0–14.2

broadcomca_identity_governanceMatch12.6

broadcomca_identity_suite_virtual_applianceRange14.0–14.2

VendorProductVersionCPE
broadcomca_identity_governance*cpe:2.3:a:broadcom:ca_identity_governance:*:*:*:*:*:*:*:*
broadcomca_identity_governance12.6cpe:2.3:a:broadcom:ca_identity_governance:12.6:*:*:*:*:*:*:*
broadcomca_identity_suite_virtual_appliance*cpe:2.3:a:broadcom:ca_identity_suite_virtual_appliance:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	ca_identity_governance	*	cpe:2.3:a:broadcom:ca_identity_governance::::::::
broadcom	ca_identity_governance	12.6	cpe:2.3:a:broadcom:ca_identity_governance:12.6:::::::*
broadcom	ca_identity_suite_virtual_appliance	*	cpe:2.3:a:broadcom:ca_identity_suite_virtual_appliance::::::::

References

www.securityfocus.com/bid/105688

support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.9%

JSON

Related for NVD:CVE-2018-14597

cve1 prion1 cvelist1