CVE-2015-3318 CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Un...
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca client automation | = r12.5-sp01 | No fix listed |
| ca client automation | = r12.8 | No fix listed |
| ca client automation | = r12.9 | No fix listed |
| ca network and systems management | = r11.2 | No fix listed |
| ca nsm job management option | = r11.0 | No fix listed |
| ca nsm job management option | = r11.1 | No fix listed |
| ca nsm job management option | = r11.2 | No fix listed |
| ca universal job management agent | All versions | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.6 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.7 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.8 | No fix listed |
| ca virtual assurance for infrastructure managers | = 12.9 | No fix listed |
| ca workload automation ae | = r11.0 | No fix listed |
| ca workload automation ae | = r11.3 | No fix listed |
| ca workload automation ae | = r11.3.5 | No fix listed |
| ca workload automation ae | = r11.3.6 | No fix listed |
References
- www.ca.com vendor-advisory
- 75033 vdb-entry
- 1032512 vdb-entry
- 1032513 vdb-entry