CVE-2018-13822

Опубликовано: 30 авг. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.

Ссылки

http://www.securityfocus.com/bid/105297
Third Party Advisory
VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105297
Third Party Advisory
VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:project_portfolio_management:*:*:*:*:*:*:*:*

Версия до 14.3 (включая)

cpe:2.3:a:broadcom:project_portfolio_management:14.4:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:project_portfolio_management:15.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:project_portfolio_management:15.2:cumulative_patch_5:*:*:*:*:*:*

cpe:2.3:a:broadcom:project_portfolio_management:15.3:cumulative_patch_2:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00262

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-6gcp-h783-vwfp