Vulnerability Description
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Project Portfolio Management | <= 14.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
FAQ
What is CVE-2018-13822?
CVE-2018-13822 is a vulnerability with a CVSS score of 7.5 (HIGH). Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
How severe is CVE-2018-13822?
CVE-2018-13822 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-13822?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Project Portfolio Management.