medium4.6
CVE-2015-3317
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Managem…
Impact
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ca | Client Automation | Versions r12.5, r12.8, r12.9 |
| Ca | Network And Systems Management | Version r11.2 |
| Ca | Nsm Job Management Option | Versions r11.0, r11.1, r11.2 |
| Ca | Universal Job Management Agent | All versions |
| Ca | Virtual Assurance For Infrastructure Managers | Versions 12.6, 12.7, 12.8, 12.9 |
| Ca | Workload Automation Ae | Versions r11, r11.3, r11.3.5, r11.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
- http://www.securityfocus.com/bid/75033
- http://www.securitytracker.com/id/1032512
- http://www.securitytracker.com/id/1032513
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
- http://www.securityfocus.com/bid/75033
- http://www.securitytracker.com/id/1032512
- http://www.securitytracker.com/id/1032513