CVE-2010-1221

CA XOsoft <r12.5 - Info Disclosure

Title source: llm

Description

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.

Scores

EPSS 0.0031
EPSS Percentile 53.7%

Classification

CWE
CWE-287
Status draft

Affected Products (6)

ca/xosoft_content_distribution
ca/xosoft_content_distribution
ca/xosoft_high_availability
ca/xosoft_high_availability
ca/xosoft_replication
ca/xosoft_replication

Timeline

Published Apr 07, 2010
Tracked Since Feb 18, 2026