Denial of Service Vulnerability in CA Service Catalog by Broadcom
CVE-2020-29478

7.5HIGH

Key Information:

Vendor

Ca Technologies, A Broadcom Company

Status
Ca Service Catalog
Vendor
CVE Published:
5 January 2021

What is CVE-2020-29478?

The CA Service Catalog versions 17.2 and 17.3 have a vulnerability in the default configuration of its Setup Utility. This security flaw could allow a remote attacker to exploit the utility and cause a denial of service condition, thereby interrupting services and impacting the availability of resources.

Affected Version(s)

CA Service Catalog 17.2

CA Service Catalog 17.3

References

https://support.broadcom.com/security-advisory/content/se...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.