CVE-2017-9393: Infoleak
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9393?
CVE-2017-9393 is classified as a medium severity vulnerability that allows remote attackers to potentially discover passwords of locked accounts.
How do I fix CVE-2017-9393?
To fix CVE-2017-9393, you should upgrade CA Identity Manager to the latest version or apply available patches provided by the vendor.
Which versions of CA Identity Manager are affected by CVE-2017-9393?
CVE-2017-9393 affects CA Identity Manager versions 12.6 to 12.6 SP8, 14.0, and 14.1.
Can CVE-2017-9393 be exploited remotely?
Yes, CVE-2017-9393 can be exploited by remote attackers who can perform exhaustive searches on locked accounts.
What type of attack is associated with CVE-2017-9393?
CVE-2017-9393 is associated with a brute force attack method targeting locked accounts to potentially reveal passwords.