Description
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105688
Scores
CVSS v3
5.3
EPSS
0.0020
EPSS Percentile
42.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
CWE-203
Status
published
Products (3)
broadcom/ca_identity_governance
12.6
broadcom/ca_identity_governance
14.0 - 14.2
broadcom/ca_identity_suite_virtual_appliance
14.0 - 14.2
Published
Oct 17, 2018
Tracked Since
Feb 18, 2026