CVE:CVE-2017-9393
CNNVD:CNNVD-201706-115
CA Identity Manager是一款用户身份管理解决方案。
CA Identity Manager r12.6版本至r12.6 SP8版本、14.0版本和14.1版本中存在安全漏洞。远程攻击者可借助穷举搜索利用该漏洞获取已锁账户的密码。
solution:Upgrade ca identity_manager to a higher version than 12.6:ga,12.6:sp1,12.6:sp2,12.6:sp3,12.6:sp4,12.6:sp5,12.6:sp6,12.6:sp7,12.6:sp8,14.0,14.1,and avoid the version 12.6:ga,12.6:sp1,12.6:sp2,12.6:sp3,12.6:sp4,12.6:sp5,12.6:sp6,12.6:sp7,12.6:sp8,14.0,14.1; Upgrade ca identity_manager_virtual_appliance to a higher version than 14.0,14.1,and avoid the version 14.0,14.1