CVEvulnerability

CVE-2015-3318

4.6 MEDIUM Published 2015-06-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.

Affected configurations

• ca client automation r12.5 • ca client automation r12.8 • ca client automation r12.9 • ca network and systems management r11.2 • ca nsm job management option r11.0 • ca nsm job management option r11.1 • ca nsm job management option r11.2 • ca universal job management agent • ca virtual assurance for infrastructure managers 12.6 • ca virtual assurance for infrastructure managers 12.7 • ca virtual assurance for infrastructure managers 12.8 • ca virtual assurance for infrastructure managers 12.9 • ca workload automation ae r11.0 • ca workload automation ae r11.3 • ca workload automation ae r11.3.5 • ca workload automation ae r11.3.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References