Lucene search

MitreCVE-2015-3317

HistoryJun 17, 2015 - 10:59 a.m.

CVE-2015-3317

2015-06-1710:59:02

CWE-119

mitre

web.nvd.nist.gov

ca common services

ca client automation

ca network and systems management

ca nsm job management option

systemedge

ca workload automation ae

cve-2015-3317

vulnerability

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

caclient_automationMatchr12.5sp01

caclient_automationMatchr12.8

caclient_automationMatchr12.9

canetwork_and_systems_managementMatchr11.2

cansm_job_management_optionMatchr11.0

cansm_job_management_optionMatchr11.1

cansm_job_management_optionMatchr11.2

cauniversal_job_management_agentMatch-

cavirtual_assurance_for_infrastructure_managersMatch12.6

cavirtual_assurance_for_infrastructure_managersMatch12.7

cavirtual_assurance_for_infrastructure_managersMatch12.8

cavirtual_assurance_for_infrastructure_managersMatch12.9

caworkload_automation_aeMatchr11

caworkload_automation_aeMatchr11.3

caworkload_automation_aeMatchr11.3.5

caworkload_automation_aeMatchr11.3.6

AND

hphp-ux

ibmaix

linuxlinux_kernel

oraclesolarisMatch-

VendorProductVersionCPE
caclient_automationr12.5cpe:2.3:a:ca:client_automation:r12.5:sp01:*:*:*:*:*:*
caclient_automationr12.8cpe:2.3:a:ca:client_automation:r12.8:*:*:*:*:*:*:*
caclient_automationr12.9cpe:2.3:a:ca:client_automation:r12.9:*:*:*:*:*:*:*
canetwork_and_systems_managementr11.2cpe:2.3:a:ca:network_and_systems_management:r11.2:*:*:*:*:*:*:*
cansm_job_management_optionr11.0cpe:2.3:a:ca:nsm_job_management_option:r11.0:*:*:*:*:*:*:*
cansm_job_management_optionr11.1cpe:2.3:a:ca:nsm_job_management_option:r11.1:*:*:*:*:*:*:*
cansm_job_management_optionr11.2cpe:2.3:a:ca:nsm_job_management_option:r11.2:*:*:*:*:*:*:*
cauniversal_job_management_agent-cpe:2.3:a:ca:universal_job_management_agent:-:*:*:*:*:*:*:*
cavirtual_assurance_for_infrastructure_managers12.6cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.6:*:*:*:*:*:*:*
cavirtual_assurance_for_infrastructure_managers12.7cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ca	client_automation	r12.5	cpe:2.3:a:ca:client_automation:r12.5:sp01::::::
ca	client_automation	r12.8	cpe:2.3:a:ca:client_automation:r12.8:::::::*
ca	client_automation	r12.9	cpe:2.3:a:ca:client_automation:r12.9:::::::*
ca	network_and_systems_management	r11.2	cpe:2.3:a:ca:network_and_systems_management:r11.2:::::::*
ca	nsm_job_management_option	r11.0	cpe:2.3:a:ca:nsm_job_management_option:r11.0:::::::*
ca	nsm_job_management_option	r11.1	cpe:2.3:a:ca:nsm_job_management_option:r11.1:::::::*
ca	nsm_job_management_option	r11.2	cpe:2.3:a:ca:nsm_job_management_option:r11.2:::::::*
ca	universal_job_management_agent	-	cpe:2.3:a:ca:universal_job_management_agent:-:::::::*
ca	virtual_assurance_for_infrastructure_managers	12.6	cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.6:::::::*
ca	virtual_assurance_for_infrastructure_managers	12.7	cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.7:::::::*

Rows per page:

1-10 of 201

References

www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx

www.securityfocus.com/bid/75033

www.securitytracker.com/id/1032512

www.securitytracker.com/id/1032513

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-3317