Login Request a demo
Unscored severity · published Apr 7, 2010
CVE-2010-1222
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request
–
CVSS
2.1%
EPSS
No
On KEV
Description
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xosoft Content Distribution · CA
r12.5 · source: NVD
XH
Xosoft High Availability · CA
r12.5 · source: NVD
XR
Xosoft Replication · CA
r12.5 · source: NVD
Affected product
XC
Xosoft Content Distribution
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1222
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1222
www.securityfocus.com
http://www.securityfocus.com/archive/1/510564/100/0/threaded
Patch
http://www.securityfocus.com/bid/39249
Patch
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869
More from Xosoft Content Distribution
–
CVE-2010-3984
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content…
–
CVE-2010-1223
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or…
–
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request