« Volver al listado

CVE-2012-6299

Estado: ModificadaAlta (10)—

Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CA — Identityminder

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6299",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-26T20:55:02.177",
  "references": [
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BFBA53B61-3A68-4506-9876-F845F6DD8A93%7D",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BFBA53B61-3A68-4506-9876-F845F6DD8A93%7D",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad no especificada en CA IdentityMinder r12.0 hasta CR16, r12.5 antes de SP15 y r12.6 GA permite a atacantes remotos evitar las restricciones de acceso a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:47:58.750",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ca:identityminder:*:cr16:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D2F6251-EF64-4C38-99E6-6AFDEA7C5EF7",
              "versionEndIncluding": "r12.0"
            },
            {
              "criteria": "cpe:2.3:a:ca:identityminder:r12.5:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "016C6C99-22EC-459E-99C0-02D0EA498EF9"
            },
            {
              "criteria": "cpe:2.3:a:ca:identityminder:r12.5:sp14:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F97E5101-2414-45AB-A6D8-4DC1440D8D37"
            },
            {
              "criteria": "cpe:2.3:a:ca:identityminder:r12.6:ga:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71E5DDA1-F03C-44C5-B209-A3688A3B734F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}