CA Security Response Blog

Update: CA20130213-01: Security Notice for CA ControlMinder

Kevin Kotas — Mon, 29 Apr 2013 15:46:00 GMT

We published a new version of the following notice today. ControlMinder customers are urged to review the latest recommendations and release notes.CA20130213-01: Security Notice for CA ControlMinder https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={A6F2B559-F02D-4FCE-B3BF-C743219D4A27} Kevin Kotas Director, CA Technologies Product Vulnerability Response Team The opinions...

CA20130319-01: Security Notice for SiteMinder products using SAML

Kevin Kotas — Wed, 20 Mar 2013 00:53:00 GMT

I published a new security notice today for SiteMinder products. The notice concerns a high risk set of vulnerabilities that deal with SAML. We are not currently aware of any exploitation of these vulnerabilities. Solutions are available. CA20130319-01: Security Notice for SiteMinder products using...

CA20130213-01: Security Notice for CA ControlMinder

Kevin Kotas — Wed, 13 Feb 2013 16:27:00 GMT

A new security notice for CA ControlMinder is now available. The notice concerns a publicly known and high risk vulnerability for the bundled JBoss Application Server. Fixes are available. See the notice below for more information. CA20130213-01: Security Notice for CA...

Update: CA20121220-01: Security Notice for CA IdentityMinder

Ken Williams — Fri, 18 Jan 2013 23:00:00 GMT

A recently published security notice for CA IdentityMinder (CA20121220-01: Security Notice for CA IdentityMinder) has been updated. The update includes a major revision to the section entitled "How to determine if the installation is affected". Revised content: How to determine if the installation is affected All versions of CA IdentityMinder r12.0, r12.5 prior to SP15, and...

Update: CA20121018-01: Security notice for CA ARCserve Backup

Kevin Kotas — Thu, 03 Jan 2013 14:28:00 GMT

We have updated the patches in security notice CA20121018-01. The patches for ARCserve Backup r15 and r16 did not fully correct the vulnerability in the NAS option. The updated patches contain the vulnerability fixes from the original patches and add a fix specifically to the NAS option. Customers are urged to install the patches at the earliest convenience. See the notice below for patch...