First published: Wed Apr 15 2020(Updated: )
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.
Credit: vuln@ca.com
Affected Software | Affected Version | How to fix |
---|---|---|
CA API Developer Portal | <=4.3.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-11660 is classified as a high severity access control vulnerability.
To fix CVE-2020-11660, upgrade CA API Developer Portal to version 4.3.2 or later.
CVE-2020-11660 is an access control flaw that allows unauthorized viewing of sensitive information.
CVE-2020-11660 affects users of CA API Developer Portal versions 4.3.1 and earlier.
Attackers with privileged access can exploit CVE-2020-11660 to access restricted sensitive information.