CVE-2017-9393

https://notcve.org/view.php?id=CVE-2017-9393

22 Sep 2017 — CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search. CA Identity Manager de la versión r12.6 a la r12.6 SP8, 14.0 y 14.1 permite que los atacantes remotos identifiquen contraseñas de cuentas bloqueadas mediante una búsqueda exhaustiva. • http://www.securityfocus.com/bid/100956 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •