|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
CA eTrust Admin contains a flaw that may allow a malicious user to bypass authentication and gain privileges on the system. The issue is due to an unspecified error in the GINA password reset interface. This flaw may lead to unauthorized access resulting in a loss of confidentiality.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Authentication Management
Impact:
Loss of Confidentiality
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade CA eTrust Admin version 8.1 SP2 CR6 or higher, as it has been reported to fix this vulnerability. In addition, Computer Associates also has released a patch to fix the flaw.
|
|
Products |
|
eTrust Admin
 |
8.1 SP2 |
8.1 SP1 |
8.1 |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
