CVEvulnerability

CVE-2015-3317

4.6 MEDIUM Published 2015-06-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Affected configurations

• ca client automation r12.5 • ca client automation r12.8 • ca client automation r12.9 • ca network and systems management r11.2 • ca nsm job management option r11.0 • ca nsm job management option r11.1 • ca nsm job management option r11.2 • ca universal job management agent • ca virtual assurance for infrastructure managers 12.6 • ca virtual assurance for infrastructure managers 12.7 • ca virtual assurance for infrastructure managers 12.8 • ca virtual assurance for infrastructure managers 12.9 • ca workload automation ae r11 • ca workload automation ae r11.3 • ca workload automation ae r11.3.5 • ca workload automation ae r11.3.6

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References