Code injection

2017-09-2214:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

CPENameOperatorVersion
identity_managereq12.6 sp1
identity_managereq12.6 sp2
identity_managereq12.6 sp3
identity_managereq12.6 sp4
identity_managereq12.6 sp5
identity_managereq12.6 sp6
identity_managereq12.6 sp7
identity_managereq12.6 sp8
identity_managereq12.6 ga
identity_managereq14.1

Name	Operator	Version
identity_manager	eq	12.6 sp1
identity_manager	eq	12.6 sp2
identity_manager	eq	12.6 sp3
identity_manager	eq	12.6 sp4
identity_manager	eq	12.6 sp5
identity_manager	eq	12.6 sp6
identity_manager	eq	12.6 sp7
identity_manager	eq	12.6 sp8
identity_manager	eq	12.6 ga
identity_manager	eq	14.1