Unscored severity · published Jun 17, 2015
CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
–
CVSS
0.5%
EPSS
No
On KEV
Description
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Client Automation · CA
r12.5; r12.8; r12.9 · source: NVD
NA
Network And Systems Management · Broadcom
r11.1 · source: NVD
NJ
Nsm Job Management Option · CA
r11.0; r11.1; r11.2 · source: NVD
UJ
Universal Job Management Agent · CA
All versions, or not specified · source: NVD
VA
Virtual Assurance For Infrastructure Managers · CA
12.6; 12.7; 12.8; 12.9 · source: NVD
WA
Workload Automation AE · CA
r11; r11.3; r11.3.5; r11.3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3316
Vendor Advisory
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
www.securityfocus.com
http://www.securityfocus.com/bid/75033
www.securitytracker.com
http://www.securitytracker.com/id/1032512
www.securitytracker.com
http://www.securitytracker.com/id/1032513
More from Network And Systems Management
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…