Description (CNA)
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CA Technologies / Identity Manager | affected 12.6 through 12.6 SP8; affected 14.0; affected 14.1 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/100956
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html
ADP enrichment
No English description supplied.