CVE-2015-8698 CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary....
HighCVSS 7.1
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom release automation | >= 5.0.2, < 5.0.2-227 | 5.0.2-227 |
| broadcom release automation | >= 5.5.1, < 5.5.1-1616 | 5.5.1-1616 |
| broadcom release automation | >= 5.5.2, < 5.5.2-434 | 5.5.2-434 |
| broadcom release automation | >= 6.1.0, < 6.1.0-1026 | 6.1.0-1026 |
References
- www.ca.com vendor-advisory
- 91497 third-party-advisory vdb-entry
- 1036193 third-party-advisory vdb-entry