CVE-2015-3316 CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Un...
MediumCVSS 4.6
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom network and systems management | = r11.1 | No fix listed |
| ca client automation | = r12.5-sp01 | No fix listed |
| ca client automation | = r12.8 | No fix listed |
| ca client automation | = r12.9 | No fix listed |
| ca network and systems management | = r11.2 | No fix listed |
| ca nsm job management option | = r11.0 | No fix listed |
| ca nsm job management option | = r11.1 | No fix listed |
| ca nsm job management option | = r11.2 | No fix listed |
| ca universal job management agent | All versions | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.6 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.7 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.8 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.9 | No fix listed |
| ca workload automation ae | = r11 | No fix listed |
| ca workload automation ae | = r11.3 | No fix listed |
| ca workload automation ae | = r11.3.5 | No fix listed |
| ca workload automation ae | = r11.3.6 | No fix listed |
References
- www.ca.com vendor-advisory
- 75033 vdb-entry
- 1032512 vdb-entry
- 1032513 vdb-entry