Vulnerabilities

TI-2020-09356 CVE-2020-11660 · GHSA-9m65-6w3f-4rmv

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows…

LOW 32

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01371 Published 2020-04-15 No fix listed

TI-2020-09355 CVE-2020-11659 · GHSA-w8xx-jh7q-6xj6

Authorization bypass in CA API Developer Portal

LOW 22

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00924 Published 2020-04-15 No fix listed CWE-639

TI-2020-09354 CVE-2020-11658 · GHSA-8mwq-82jg-rcwh

Authorization bypass in CA API Developer Portal

MEDIUM 47

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02375 Published 2020-04-15 No fix listed CWE-639

TI-2020-09359 CVE-2020-11663 · GHSA-qj7x-gxwx-cjwh

Open redirect in CA API Developer Portal

LOW 30

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01325 Published 2020-04-15 No fix listed CWE-601

TI-2020-09358 CVE-2020-11662 · GHSA-hh5g-p7p2-7xqp

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows…

LOW 39

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03203 Published 2020-04-15 No fix listed

TI-2020-09357 CVE-2020-11661 · GHSA-jppr-v7v7-49m8

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows…

LOW 39

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01887 Published 2020-04-15 No fix listed

TI-2020-09362 CVE-2020-11666 · GHSA-vgfh-838x-q4cm

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows…

MEDIUM 44

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03022 Published 2020-04-15 No fix listed

TI-2020-09361 CVE-2020-11665 · GHSA-99vh-qp5v-28g7

Open redirect in CA API Developer Portal

LOW 30

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01569 Published 2020-04-15 No fix listed CWE-601

TI-2020-09360 CVE-2020-11664 · GHSA-2pg2-438w-c6wh

Open redirect in CA API Developer Portal

LOW 30

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2020-04-15 No fix listed CWE-601

TI-2018-04857 CVE-2018-6590 · GHSA-6rgv-3m65-6x4r

Cross-site scripting in CA API Developer Portal

LOW 29

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00747 Published 2018-08-03 No fix listed CWE-79

Vulnerabilities

Filters