CVE-2018-14597 Vulnerability Details

  /     /     /  

CVE-2018-14597 Metadata Quick Info

CVE Published: 17/10/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: ca | Vendor: CA Technologies | Product: CA Identity Governance
Status : PUBLISHED

---

CVE-2018-14597 Description

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-203
CWE Name: CWE-203: Information Exposure Through Discrepancy
Source: CA Technologies

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).