Not rated
CVE-2020-11662 CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a…
Description
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CA API Developer Portal | Versions not published |
References
- techdocs.broadcom.com techdocs.broadcom.com
- packetstormsecurity.com packetstormsecurity.com
- 20200417 CA20200414-01: Security Notice for CA API Developer Portal seclists.org
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of CA API Developer Portal
The 9 CVEs of CA API Developer Portal →
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view…
Not rated
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a…
Not rated
CVE-2020-11658
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to…
Not rated
CVE-2020-11663
CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to…
Not rated