Vulnerability Details CVE-2018-13822
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/105297
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
- http://www.securityfocus.com/bid/105297
- https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
Products affected by CVE-2018-13822
-
cpe:2.3:a:broadcom:project_portfolio_management:14.2
-
cpe:2.3:a:broadcom:project_portfolio_management:14.3
-
cpe:2.3:a:broadcom:project_portfolio_management:14.4
-
cpe:2.3:a:broadcom:project_portfolio_management:15.1
-
cpe:2.3:a:broadcom:project_portfolio_management:15.2
-
cpe:2.3:a:broadcom:project_portfolio_management:15.3