CVE-2018-13822

Published: Aug 30, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.

Affected (5)

Products: Broadcom: Project Portfolio Management

Broadcom

1 product

Project Portfolio Management

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Broadcom Project Portfolio Management	Up to 14.3
Broadcom Project Portfolio Management	Version 14.4
Broadcom Project Portfolio Management	Version 15.1
Broadcom Project Portfolio Management	Version 15.2 cumulative_patch_5
Broadcom Project Portfolio Management	Version 15.3 cumulative_patch_2