CVE-2017-9393

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

Date published : 2017-09-22

http://www.securityfocus.com/bid/100956

https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01–security-notice-for-ca-identity-manager.html