CVEvulnerability
CVE-2015-2828
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
Affected configurations
• broadcom spectrum 9.2
• broadcom spectrum 9.3
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html packetstormsecurity.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx Vendor Advisory
- http://www.securityfocus.com/archive/1/535205/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/73957 www.securityfocus.com
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html packetstormsecurity.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx Vendor Advisory
- http://www.securityfocus.com/archive/1/535205/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/73957 www.securityfocus.com