CA Data Protection - iConsole session cookies are not refreshed correctly.

Document ID : KB000008693
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

CA Data Protection iConsole uses cookies to maintain the sessionID. Consecutive login and logoff from the same user reuses the sessionID and is not renewed. This is a potential security loophole.

Environment:
CA Data Protection 15.2 iConsole
Cause:

Programmatic issue.

Resolution:

FIX:RO99173 addresses this issue and will renew the session ID for each login attempt.

Additional Information:

FIX:RO99173 is available to donwload from the CA Support Portal (http://support.ca.com)