NetSight
IP …
critical9.8Public exploit code

CVE-2018-15691

Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary code.

Affected products

VendorProductAffected versions
BroadcomRelease Automation
from 6.3 before 6.3.0.9945
from 6.4 before 6.4.0.10119
from 6.5 before 6.5.0.10080

Weakness classification

CWE-502

References