CVE-2020-11665

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vuln@ca.com

Published

2020-04-15

Last modified

2024-08-04

Weaknesses

CWE-601

Affected products

• Ca Api Developer Portal (Broadcom)

References

• http://packetstormsecurity.com/files/157244/CA-API-Developer-Portal-4.2.x-4.3.1-Access-Bypass-Privilege-Escalation.html
• http://packetstormsecurity.com/files/157276/CA-API-Developer-Portal-4.2.x-4.3.1-Access-Bypass-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2020/Apr/24
• https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2020/CA20200414-01-Securit-Notice-for-CA…