Описание
CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2014 (включая)
cpe:2.3:a:ca:cloud_service_management:*:spring:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.0033
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
больше 3 лет назад
CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.
EPSS
Процентиль: 55%
0.0033
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-287