description: CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition.
problem types: CWE-258 Empty Password in Configuration File
affected:
{
product: CA Service Catalog
vendor: CA Technologies, A Broadcom Company
versions:
status: affected, version: 17.2
status: affected, version: 17.3
}