Unscored CVE-2017-9393 EUVD-2017-18328GHSA-h978-qhj9-9fjc

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through…

Published Sep 22, 2017 · Updated Sep 17, 2024 · Assigned by ca

Vendor: CA Technologies Product: Identity Manager

Description

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Affected products

Vendor	Product	Affected	Fixed
CA Technologies	Identity Manager	12.6 through 12.6 SP8, 14.0, 14.1	—

References

100956 vdb-entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html