Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-3317

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Published

2015-06-17T10:59:02.227

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ca client_automation r12.5 Yes
Application ca client_automation r12.8 Yes
Application ca client_automation r12.9 Yes
Application ca network_and_systems_management r11.2 Yes
Application ca nsm_job_management_option r11.0 Yes
Application ca nsm_job_management_option r11.1 Yes
Application ca nsm_job_management_option r11.2 Yes
Application ca universal_job_management_agent - Yes
Application ca virtual_assurance_for_infrastructure_managers 12.6 Yes
Application ca virtual_assurance_for_infrastructure_managers 12.7 Yes
Application ca virtual_assurance_for_infrastructure_managers 12.8 Yes
Application ca virtual_assurance_for_infrastructure_managers 12.9 Yes
Application ca workload_automation_ae r11 Yes
Application ca workload_automation_ae r11.3 Yes
Application ca workload_automation_ae r11.3.5 Yes
Application ca workload_automation_ae r11.3.6 Yes
Operating System hp hp-ux * No
Operating System ibm aix * No
Operating System linux linux_kernel * No
Operating System oracle solaris - No
References