CVE-2017-9393

Critical

Published: 22/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CA Identity Manager versions r12.6 to r12.6 SP8, 14.0, and 14.1 allow remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Risk Assessment

Attackers may gain access to locked accounts, potentially leading to data breaches and unauthorized access.

Recommendation

It is recommended to upgrade to the latest version of the software and implement additional security measures to mitigate the risk.

Original NVD description (English source)

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.