What’s Vulnerable › Vulnerabilities

CVE-2017-9393

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-22 · updated 2026-06-17
• Weakness: CWE-200

Description

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Affected products

• Ca Identity Manager: 12.6-ga, 12.6-sp1, 12.6-sp2, 12.6-sp3, 12.6-sp4, 12.6-sp5 (+5)
• Ca Identity Manager Virtual Appliance: 14.0, 14.1

References

• http://www.securityfocus.com/bid/100956
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html
• http://www.securityfocus.com/bid/100956
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html

Get alerted when CVE-2017-9393 or the next vulnerability affects your stack