description: CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.
problem types: CORS OriginHeaderScrutiny
affected:
{
product: CA API Developer Portal
vendor: n/a
versions:
status: affected, version: 4.3.1 and earlier
}