Strix
26.1K

CVE-2015-3318

UnknownEPSS 0.37%

Last modified

CVE-2015-3318 is a vulnerability of currently unknown severity. CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.

Metrics

EPSS Probability
0.37%

28.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
CaClient Automationr12.5Sp01
CaClient Automationr12.8—
CaClient Automationr12.9—
CaNetwork And Systems Managementr11.2—
CaNsm Job Management Optionr11.0—
CaNsm Job Management Optionr11.1—
CaNsm Job Management Optionr11.2—
CaUniversal Job Management AgentAll versions—
CaVirtual Assurance For Infrastructure Managers12.6—
CaVirtual Assurance For Infrastructure Managers12.7—
CaVirtual Assurance For Infrastructure Managers12.8—
CaVirtual Assurance For Infrastructure Managers12.9—
CaWorkload Automation Aer11.0—
CaWorkload Automation Aer11.3—
CaWorkload Automation Aer11.3.5—
CaWorkload Automation Aer11.3.6—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-3318?
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.
How severe is CVE-2015-3318?
Severity scoring for CVE-2015-3318 is pending analysis. The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.
How do I fix CVE-2015-3318?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-3318?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST