First published: Tue Jan 05 2021(Updated: )
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition.
Credit: vuln@ca.com
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom CA Service Catalog | =17.2 | |
Broadcom CA Service Catalog | =17.3 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for CA Service Catalog is CVE-2020-29478.
The severity of CVE-2020-29478 is high with a severity value of 7.5.
CA Service Catalog versions 17.2 and 17.3 are affected by CVE-2020-29478.
A remote attacker may exploit CVE-2020-29478 to cause a denial of service condition by exploiting the default configuration of the Setup Utility.
No, Microsoft Windows is not affected by CVE-2020-29478.
To fix CVE-2020-29478, it is recommended to apply the necessary security patches provided by Broadcom.
More information about CVE-2020-29478 can be found at the following reference: [https://support.broadcom.com/security-advisory/content/security-advisories/CA20201215-01-Security-Notice-for-CA-Service-Catalog/ESDSA16810]