CVE-2020-11658: Critical severity ca api developer portal vulnerability
Published Apr 15, 2020
·Updated
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.
Affected Software
1 affected component
Broadcom Ca Api Developer Portal<=4.3.1
Event History
Apr 15, 2020
CVE Published
via MITRE·08:46 PM
Data Sourced
via MITRE·08:46 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-11658?
CVE-2020-11658 is classified as a high severity vulnerability due to its ability to allow attackers to bypass authorization.
2
How do I fix CVE-2020-11658?
To fix CVE-2020-11658, upgrade the CA API Developer Portal to version 4.3.2 or later.
3
What type of vulnerability is CVE-2020-11658?
CVE-2020-11658 is an authorization bypass vulnerability related to the handling of shared secret keys.
4
Which versions of CA API Developer Portal are affected by CVE-2020-11658?
CVE-2020-11658 affects CA API Developer Portal version 4.3.1 and earlier.
5
What can attackers do with CVE-2020-11658?
Attackers can exploit CVE-2020-11658 to bypass authorization and gain unauthorized access to resources.