Code injection

2018-10-1721:49:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.

CPENameOperatorVersion
ca_identity_governanceeq12.6
ca_identity_governancege14.0
ca_identity_governancele14.2
ca_identity_suite_virtual_appliancege14.0
ca_identity_suite_virtual_appliancele14.2

Name	Operator	Version
ca_identity_governance	eq	12.6
ca_identity_governance	ge	14.0
ca_identity_governance	le	14.2
ca_identity_suite_virtual_appliance	ge	14.0
ca_identity_suite_virtual_appliance	le	14.2