97 matches found
PT-2020-12752
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to bypass authorization due to the insecure handling of shared secret keys. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, updat...
PT-2020-12760
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows malicious users to elevate privileges. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, update to ...
PT-2020-12755
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to view and edit user data. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, upda...
PT-2020-12758
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to the insecure handling of homeRedirect page redirects. Recommendations For CA API Developer Portal versions 4.3.1...
PT-2020-12753
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to perform a restricted user administration action. Recommendations For CA API Developer Portal versions...
CVE-2020-11662: Undefined Security Weakness
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information...
CVE-2020-11658: Authorization Bypass Through User-Controlled Key
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization...
PT-2020-12759
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of loginRedirect page redirects. Recommendations For CA API Developer Portal versions 4.3.1 and...
CVE-2020-11665: URL Redirection to Untrusted Site
CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...
PT-2020-12757
Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of 404 requests. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, update...
CVE-2018-6590
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
CVE-2018-6590
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
Cross site scripting
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
CVE-2018-6590
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
CVE-2018-6590
CA API Developer Portal 4.x (before 4.2.5.3 and before 4.2.7.1) has a reflected cross-site scripting vulnerability. Root cause described as failure to filter HTML in user input; could allow remote attacker to execute arbitrary script in the user’s browser. Remediation: upgrade to 4.2.5.3+ or 4.2....
CVE-2018-6590: Improper Neutralization of Input During Web Page Generation
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
Cross site scripting
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing...
Cross site scripting
CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to the widgetID variable...