CVE:CVE-2010-1221
CNNVD:CNNVD-201004-112
CA XOsoft提供全面的故障恢复、业务连续性和连续数据保护解决方案，能够满足企业的DR、故障切换和数据恢复需求。
CA XOsoft 'SOAP'请求存在身份认证和信息泄露漏洞。CA XOsoft产品没有合适的处理身份认证，远程攻击者可以借助一个SOAP请求枚举用户名称。
solution:Upgrade ca xosoft_content_distribution to a higher version than r12.0,r12.5,and avoid the version r12.0,r12.5; Upgrade ca xosoft_high_availability to a higher version than r12.0,r12.5,and avoid the version r12.0,r12.5; Upgrade ca xosoft_replication to a higher version than r12.0,r12.5,and avoid the version r12.0,r12.5