CVE-2011-1655
The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 11.97% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- broadcom/total defense
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/44097Vendor Advisory
- http://securitytracker.com/id?1025353
- http://www.securityfocus.com/archive/1/517492/100/0/threaded
- http://www.securityfocus.com/archive/1/517494/100/0/threaded
- http://www.securityfocus.com/bid/47356
- http://www.vupen.com/english/advisories/2011/0977Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-127/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66727
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
- http://secunia.com/advisories/44097Vendor Advisory
- http://securitytracker.com/id?1025353
- http://www.securityfocus.com/archive/1/517492/100/0/threaded
- http://www.securityfocus.com/archive/1/517494/100/0/threaded
- http://www.securityfocus.com/bid/47356
- http://www.vupen.com/english/advisories/2011/0977Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-127/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66727
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.