CVE-2020-11664

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...

CVE-2020-11664

CVE-2020-11664 affects Broadcom CA API Developer Portal (versions 4.3.1 and earlier). The issue is an insecure handling of the homeRedirect page that enables open redirect attacks due to an input validation error. Multiple connected sources confirm the vulnerability and affected product scope; ex...

CVE-2020-11660: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...

CVE-2020-11664: URL Redirection to Untrusted Site

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...

PT-2020-12752

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to bypass authorization due to the insecure handling of shared secret keys. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, updat...

PT-2020-12753

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to perform a restricted user administration action. Recommendations For CA API Developer Portal versions...

CVE-2020-11661: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data...

openSUSE Security Update : chromium (openSUSE-2020-519)

This update for chromium fixes the following issues : Chromium was updated to 81.0.4044.92 boo1168911 : - CVE-2020-6454: Use after free in extensions - CVE-2020-6423: Use after free in audio - CVE-2020-6455: Out of bounds read in WebSQL - CVE-2020-6430: Type Confusion in V8 - CVE-2020-6456:...

PT-2020-12757

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of 404 requests. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, update...

PT-2020-12759

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of loginRedirect page redirects. Recommendations For CA API Developer Portal versions 4.3.1 and...

CVE-2020-11663: URL Redirection to Untrusted Site

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks...

CVE-2020-11665: URL Redirection to Untrusted Site

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...

CVE-2020-11659: Authorization Bypass Through User-Controlled Key

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action...

CVE-2020-11666: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges...

CVE-2020-11662: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information...

PT-2020-12756

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information due to insecure request handling. Recommendations For CA API...

CVE-2020-11658: Authorization Bypass Through User-Controlled Key

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization...

PT-2020-12755

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to view and edit user data. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, upda...

PT-2020-12754

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to view restricted sensitive information. Recommendations For CA API Developer Portal versions 4.3.1 and...

PT-2020-12760

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows malicious users to elevate privileges. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, update to ...