CVE-2017-9393

Published: Sep 22, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Affected (13)

Products: Ca: Identity Manager, Identity Manager Virtual Appliance

2 products

Identity Manager

Identity Manager Virtual Appliance

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ca Identity Manager	Version 12.6 ga
Ca Identity Manager	Version 12.6 sp1
Ca Identity Manager	Version 12.6 sp2
Ca Identity Manager	Version 12.6 sp3
Ca Identity Manager	Version 12.6 sp4
Ca Identity Manager	Version 12.6 sp5
Ca Identity Manager	Version 12.6 sp6
Ca Identity Manager	Version 12.6 sp7
Ca Identity Manager	Version 12.6 sp8
Ca Identity Manager	Version 14.0
Ca Identity Manager	Version 14.1
Ca Identity Manager Virtual Appliance	Version 14.0
Ca Identity Manager Virtual Appliance	Version 14.1