CVE-2014-8472: Ca Cloud Service Management

Medium severity, CVSS 6.8. EPSS: 2.2% chance of exploitation in the next 30 days.

CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.

Affected products

• Ca Cloud Service Management: up to and including 2014

Published 2014-11-04. Last modified 2026-06-17.