CVE-2018-13822: High severity broadcom project portfolio management vulnerability
Published Aug 30, 2018
·Updated
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
Affected Software
5 affected components
Broadcom Project Portfolio Management<=14.3
Broadcom Project Portfolio Management=14.4
Broadcom Project Portfolio Management=15.1
Broadcom Project Portfolio Management=15.2-cumulative_patch_5
Broadcom Project Portfolio Management=15.3-cumulative_patch_2
Remediation
Event History
Aug 30, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-13822?
CVE-2018-13822 is considered a critical vulnerability due to unprotected storage of sensitive credentials.
2
How do I fix CVE-2018-13822?
To mitigate CVE-2018-13822, upgrade to CA PPM version 15.3 CP3 or later, which addresses the credential storage issue.
3
What versions of Broadcom Project Portfolio Management are affected by CVE-2018-13822?
CVE-2018-13822 affects CA PPM versions 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below.
4
What type of information can be accessed due to CVE-2018-13822?
CVE-2018-13822 allows attackers to access sensitive information stored in unprotected credentials.
5
Is there a workaround for CVE-2018-13822 if I can't upgrade?
There are no official workarounds for CVE-2018-13822; upgrading to a fixed version is the recommended action.