CVE-2018-14597
N/A
N/A
Summary
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CA Technologies | CA Identity Governance | 14.x | affected |
Weaknesses
- CWE-203: CWE-203: Information Exposure Through Discrepancy
ADP Enrichment
CVE Program Container
Additional References
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html
- http://www.securityfocus.com/bid/105688
References
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html
- http://www.securityfocus.com/bid/105688
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.