Posted by Kotas, Kevin J on May 10
CA20110510-01: Security Notice for CA eHealth
Issued: May 10, 2011
CA Technologies support is alerting customers to a security risk with
CA eHealth. A vulnerability exists that may potentially allow an
attacker to compromise web user security.
The vulnerability, CVE-2011-1899, occurs due to insufficient
validation of sent request parameters. An attacker, who can convince
a user to follow a carefully constructed link or view a malicious
web…
