CVE-2015-3318
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.
- Score
- CVSS 2.0 4.6 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2015-06-17
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
- Client Automation (Ca)
- Network And Systems Management (Ca)
- Nsm Job Management Option (Ca)
- Universal Job Management Agent (Ca)
- Virtual Assurance For Infrastructure Managers (Ca)
- Workload Automation Ae (Ca)
References
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-secur…
- http://www.securityfocus.com/bid/75033
- http://www.securitytracker.com/id/1032512
- http://www.securitytracker.com/id/1032513