Strix
26.1K

CVE-2015-3316

UnknownEPSS 0.46%

Last modified

CVE-2015-3316 is a vulnerability of currently unknown severity. CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.

Metrics

EPSS Probability
0.46%

36.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
BroadcomNetwork And Systems Managementr11.1—
CaClient Automationr12.5Sp01
CaClient Automationr12.8—
CaClient Automationr12.9—
CaNetwork And Systems Managementr11.2—
CaNsm Job Management Optionr11.0—
CaNsm Job Management Optionr11.1—
CaNsm Job Management Optionr11.2—
CaUniversal Job Management AgentAll versions—
CaVirtual Assurance For Infrastructure Managers12.6—
CaVirtual Assurance For Infrastructure Managers12.7—
CaVirtual Assurance For Infrastructure Managers12.8—
CaVirtual Assurance For Infrastructure Managers12.9—
CaWorkload Automation Aer11—
CaWorkload Automation Aer11.3—
CaWorkload Automation Aer11.3.5—
CaWorkload Automation Aer11.3.6—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-3316?
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.
How severe is CVE-2015-3316?
Severity scoring for CVE-2015-3316 is pending analysis. The EPSS model estimates a 0.46% probability of exploitation in the next 30 days.
How do I fix CVE-2015-3316?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-3316?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST