Not rated
CVE-2020-11658 CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to…
Description
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CA API Developer Portal | Versions not published |
References
- techdocs.broadcom.com techdocs.broadcom.com
- 20200417 CA20200414-01: Security Notice for CA API Developer Portal seclists.org
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of CA API Developer Portal
The 9 CVEs of CA API Developer Portal →
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view…
Not rated
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a…
Not rated
CVE-2020-11663
CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to…
Not rated
CVE-2020-11662
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a…
Not rated