{"id":"CVE-2018-14597","state":"PUBLISHED","title":"CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote att","description":"CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.","publishedAt":"2018-10-17T21:00:00.000Z","updatedAt":"2024-08-05T09:29:51.676Z","severity":null,"assigner":"ca","products":["CA Technologies CA Identity Governance"],"affected":[{"vendor":"CA Technologies","product":"CA Identity Governance","versions":[{"version":"14.x","status":"affected"}]}],"references":["https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html","http://www.securityfocus.com/bid/105688"],"weaknesses":["CWE-203"],"ingestedAt":"2026-10-29T19:44:20.464Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/14xxx/CVE-2018-14597.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-14597","state":"PUBLISHED","datePublished":"2018-10-17T21:00:00.000Z","dateUpdated":"2024-08-05T09:29:51.676Z","assignerShortName":"ca","assignerOrgId":"e291eae9-7c0a-46ac-ba7d-5251811f8b7f","dateReserved":"2018-07-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names."}],"affected":[{"vendor":"CA Technologies","product":"CA Identity Governance","versions":[{"version":"14.x","status":"affected"}]}],"references":[{"url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/105688","name":"105688","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-203","description":"CWE-203: Information Exposure Through Discrepancy","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ca","dateUpdated":"2018-10-23T09:57:01.000Z","orgId":"e291eae9-7c0a-46ac-ba7d-5251811f8b7f"},"datePublic":"2018-10-17T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vuln@ca.com","ID":"CVE-2018-14597","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"CA Identity Governance","version":{"version_data":[{"version_value":"14.x"}]}}]},"vendor_name":"CA Technologies"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-203: Information Exposure Through Discrepancy"}]}]},"references":{"reference_data":[{"name":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html","refsource":"CONFIRM","url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html"},{"name":"105688","refsource":"BID","url":"http://www.securityfocus.com/bid/105688"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/105688","name":"105688","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:29:51.676Z"}}]}}}