Unscored severity · published Jun 17, 2015
CVE-2015-3317
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Client Automation · CA
r12.5; r12.8; r12.9 · source: NVD
NA
Network And Systems Management · CA
r11.2 · source: NVD
NJ
Nsm Job Management Option · CA
r11.0; r11.1; r11.2 · source: NVD
UJ
Universal Job Management Agent · CA
All versions, or not specified · source: NVD
VA
Virtual Assurance For Infrastructure Managers · CA
12.6; 12.7; 12.8; 12.9 · source: NVD
WA
Workload Automation AE · CA
r11; r11.3; r11.3.5; r11.3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3317
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3317
Vendor Advisory
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
www.securityfocus.com
http://www.securityfocus.com/bid/75033
www.securitytracker.com
http://www.securitytracker.com/id/1032512
www.securitytracker.com
http://www.securitytracker.com/id/1032513
More from Client Automation
5.5
CVE-2017-8391
The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system…
–
CVE-2015-3318
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…
–
CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0,…