Unscored severity · published Aug 15, 2011
CVE-2011-3011
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands,…
–
CVSS
71.6%
EPSS
No
On KEV
Description
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)71.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Arcserve D2d · CA
r15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3011
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3011
securityreason.com
http://securityreason.com/securityalert/8338
www.securityfocus.com
http://www.securityfocus.com/archive/1/519234/100/0/threaded
Exploit
http://www.securityfocus.com/bid/48897
support.ca.com
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B7D3ACC0F-6C01-4BE2-B5C0-C430CEB45BE6%7D